CVE-2009-1799

creationtimestamp| type| source ---|---|--- 2009-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8636...

Cross site scripting

Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799...

CVE-2008-1799

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5360...

Debian Security Advisory DSA 1372-1 (ktorrent)

The remote host is missing an update to ktorrent announced via advisory DSA 1372-1. OpenVAS Vulnerability Test $Id: deb13721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1372-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1372-2 (ktorrent)

The remote host is missing an update to ktorrent announced via advisory DSA 1372-2. OpenVAS Vulnerability Test $Id: deb13722.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1372-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SuSE 10 Security Update : ktorrent (ZYPP Patch Number 3049)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384 / CVE-2007-1799. Another bug could be exploited to crash Ktorrent. CVE-2007-1385 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

[SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA 1373-2 [email protected] http://www.debian.org/security/ Steve Kemp October 23th, 2007 http://www.debian.org/security/faq -...

openSUSE 10 Security Update : ktorrent (ktorrent-3057)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384,CVE-2007-1799. Another bug could be exploited to crash Ktorrent CVE-2007-1385. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

[SECURITY] [DSA 1372-1] New ktorrent packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA 1373-1 [email protected] http://www.debian.org/security/ Steve Kemp September 11th, 2007 http://www.debian.org/security/faq -...

CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

DEBIAN-CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

CVE-2007-1799

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384...

CVE-2006-1799

CVE-2006-1799 affects Censtore 7.3.002 and earlier; the vulnerability is a remote command-injection flaw in censtore.cgi where shell metacharacters in the page parameter can be exploited to run arbitrary commands. Root cause is improper sanitization/handling of the page parameter, enabling an att...

FreeBSD : fswiki -- XSS problem in file upload form (84479a62-ca5f-11d9-b772-000c29b00e99)

A Secunia security advisory reports : A vulnerability has been reported in FreeStyle Wiki and FSWikiLite, which can be exploited by malicious people to conduct script insertion attacks. Input passed in uploaded attachments is not properly sanitised before being used. This can be exploited to inje...

CVE-2002-1799

CVE-2002-1799 concerns Cross-site Scripting in phpRank 1.8. The vulnerability allows remote attackers to inject arbitrary script/HTML via two user-supplied parameters: email (to add.php) and banurl. The connected documents do not provide vendor-specific patches or versioned remediation; no exploi...

CVE-2005-1799

CVE-2005-1799 describes a cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10. The provided records specify an XSS issue that lets an attacker inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base CVSS v2 score of 4.3 (m...

CVE-2004-1799

CVE-2004-1799 describes a vulnerability in PF (packet filter) on certain OpenBSD versions where, when stateful filtering is enabled, packets for a session are not limited to the original interface. This allows a remote attacker to bypass intended packet filters by sending spoofed packets to other...

CVE-2004-1799

PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces...