115 matches found
openSUSE Security Update : moodle (openSUSE-SU-2010:0212-1)
Moodle version 1.9.8 fixes several security issues including cross-site-scripting XSS and SQL injection bugs CVE-2010-1613, CVE-2010-1614, CVE-2010-1615, CVE-2010-1616, CVE-2010-1617 CVE-2010-1618, CVE-2010-1619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
CVE-2010-1616
CVE-2010-1616 affects Moodle 1.8.x and 1.9.x up to 1.9.7/1.9.8, where restoring a course can create new roles, enabling teachers to create new accounts without moodle/user:create capability. Root cause: role creation during course restore. Impact: potential unauthorized account creation by teache...
CVE-2009-1616
Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...
CVE-2009-1616
The CVE pertains to Coppermine Photo Gallery (CPG) prior to version 1.4.22, where the docs/showdoc.php script fails to sanitize the css parameter, enabling cross-site scripting. The underlying issue is improper input handling that allows injection of arbitrary script/HTML, with the impact describ...
CVE-2009-1616
creationtimestamp| type| source ---|---|--- 2009-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32963...
Debian Security Advisory DSA 1616-1 (clamav)
The remote host is missing an update to clamav announced via advisory DSA 1616-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Debian Security Advisory DSA 1616-2 (clamav)
The remote host is missing an update to clamav announced via advisory DSA 1616-2. OpenVAS Vulnerability Test $Id: deb16162.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1616-2 clamav Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2007-1616
CVE-2007-1616 affects ScriptMagix Lyrics 2.0 and earlier. The vulnerability is a SQL injection in index.php, exploitable via the recid parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected component and impact (remote code execution t...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to comments.php or 2 pollid parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616...
CVE-2006-1616
CVE-2006-1616 involves multiple SQL injection vulnerabilities in Advanced Poll 2.02. The affected component is the poll software’s pages where the (1) id parameter passed to comments.php and (2) poll_id parameter passed to page.php can be exploited to execute arbitrary SQL commands. The NVD entry...
CVE-2005-1616
CVE-2005-1616 concerns Ultimate PHP Board (UPB). The connected docs show that UPB versions up to 1.9.6 (i.e.,
CVE-2002-1616
CVE-2002-1616 describes multiple buffer overflows in HP Tru64 UNIX affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The vulnerability allows local users to escalate privileges to root via several utilities: (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc. The description iden...
CVE-2004-1616
CVE-2004-1616 describes a remote-denial-of-service through crafted HTML: a web page or HTML email containing a table with a td and a large rowspan can trigger memory consumption. Publicly documented impact is availability (PARTIAL) with a base score of 5.0 (NVD CVSS2: AV:N/AC:L/Au:N/C:N/I:N/A:P)....
CVE-2004-1616
Links allows remote attackers to cause a denial of service memory consumption via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme...