115 matches found
Piwigo 2.7.2 Cross Site Scripting / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Piwigo - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version: 2.7....
Piwigo 2.7.2 SQL Injection / Cross Site Scripting Vulnerabilities
Piwigo version 2.7.2 suffers from cross site scripting and remote SQL injection vulnerabilities. Exploit Title: Piwigo - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version: 2.7.2 CVE: CVE-2014-1470 CVE References:...
Piwigo 2.7.2 - Multiple Vulnerabilities
Piwigo 2.7.2 - Multiple Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Piwigo 2.7.2 - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor:...
Piwigo 2.7.2 - Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Piwigo 2.7.2 - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version...
F5 Networks BIG-IP : Multiple PHP vulnerabilities (K13519)
PHP has been cited with the following multiple vulnerabilities, which may be locally exploitable on some F5 products : CVE-2006-7243 PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file...
CVE-2014-1470
The CVE shows that BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 did not enforce a password for the SMB Storage and Access service, enabling an unauthenticated attacker to read/write files via SMB over Wi‑Fi or USB (Development Mode). Root cause: SMB authentication bypass in the ...
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)
This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)
This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...
CVE-2013-1470
CVE-2013-1470 affects Geeklog’s Calendar plugin (calendar/index.php) with XSS via the calendar_type parameter submitted to submit.php. Affected: Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2. Root cause: insufficient input sanitization of the calendar_type field leading to injection of arbitr...
Oracle Linux 6 : php (ELSA-2012-1046)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1046 advisory. - add security fix for CVE-2010-2950 - fix tests for CVE-2012-2143, CVE-2012-0789 - add fix for CVE-2012-2336 - add security fixes for CVE-2012-0781,...
Cross-Site Scripting (XSS) in Geeklog
Advisory ID: HTB23143 Product: Geeklog Vendor: http://www.geeklog.net Vulnerable Versions: 1.8.2 and probably prior Tested Version: 1.8.2 Vendor Notification: February 6, 2013 Vendor Patch: February 20, 2013 Public Disclosure: February 27, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...
Geeklog 1.8.2 Cross Site Scripting Vulnerability
Geeklog version 1.8.2 suffers from a cross site scripting vulnerability. Product: Geeklog Vendor: http://www.geeklog.net Vulnerable Versions: 1.8.2 and probably prior Tested Version: 1.8.2 Vendor Notification: February 6, 2013 Vendor Patch: February 20, 2013 Public Disclosure: February 27, 2013...
Geeklog 1.8.2 Cross Site Scripting
Advisory ID: HTB23143 Product: Geeklog Vendor: http://www.geeklog.net Vulnerable Versions: 1.8.2 and probably prior Tested Version: 1.8.2 Vendor Notification: February 6, 2013 Vendor Patch: February 20, 2013 Public Disclosure: February 27, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...
CVE-2012-1470
CVE-2012-1470 describes multiple XSS vulnerabilities in ocPortal before 7.1.6, triggered via the code_editor.php endpoint when user-supplied values in the path or line parameters are reflected back to the browser. Exploitation allows remote attackers to inject arbitrary web script or HTML. The re...
Ubuntu Update for linux-lts-backport-natty USN-1470-1
Ubuntu Update for Linux kernel vulnerabilities USN-1470-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14701.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-lts-backport-natty USN-1470-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-1470-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PHP 5.3 < 5.3.6 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02764)
HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
