Unfixed XSS vulnerability at secure.smugmug.com

Security researcher Sony, has submitted on 16/12/2011 a cross-site-scripting XSS vulnerability affecting secure.smugmug.com, which at the time of submission ranked 1822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

CVE-2011-1822

The CVE concerns IBM Tivoli Directory Server (TDS) 5.2.x (up to 5.2.0.5-TIV-ITDS-IF0009). The change log records a cleartext SHA password, exposing sensitive credentials to local read access. Affected component is LDAP_ADD, and the underlying issue is storing passwords in logs. The impact is that...

Fedora Update for qt FEDORA-2010-16880

Check for the Version of qt OpenVAS Vulnerability Test Fedora Update for qt FEDORA-2010-16880 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

Fedora 14 : qt-4.7.0-8.fc14 (2010-16880)

Fix CVE-2010-1822 WebKit: DoS crash by processing certain SVG images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Google Chrome multiple unspecified vulnerabilities - October 10(Windows)

The host is running Google Chrome and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultunspecifiedvulnoct10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple unspecified vulnerabilities - October 10Windows Authors: Madhuri D...

CVE-2010-1822

CVE-2010-1822 (WebKit): WebKit used in Apple Safari (pre-4.1.3 and 5.0.x before 5.0.3) and Google Chrome (before 6.0.472.62) fails to correctly cast an unspecified variable when processing an SVG element embedded in a non-SVG document, allowing remote attackers to trigger arbitrary code execution...

Debian Security Advisory DSA 1822-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 1822-1. OpenVAS Vulnerability Test $Id: deb18221.nasl 8970 2018-02-27 15:16:18Z cfischer $ Description: Auto-generated from advisory DSA 1822-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1822-1 : mahara - insufficient input sanitization

It was discovered that mahara, an electronic portfolio, weblog, and resume builder is prone to several cross-site scripting attacks, which allow an attacker to inject arbitrary HTML or script code and steal potential sensitive data from other users. The oldstable distribution etch does not contai...

CVE-2009-1822

CVE-2009-1822 affects the InterJoomla ArtForms (com_artforms) Joomla! extension (version 2.1b7). The vulnerability is a PHP remote file inclusion via a URL supplied to mosConfig_absolute_path in one of three PHP scripts (assets/captcha/includes/captchaform/imgcaptcha.php, mp3captcha.php, or asset...

CVE-2009-1822

creationtimestamp| type| source ---|---|--- 2009-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8697...

CVE-2008-1822

CVE-2008-1822 describes an unspecified vulnerability in the Oracle Application Express component of Oracle Application Express 3.0.1 (aka APEX02). The connected sources indicate the issue has unknown impact and remote attack vectors, with a NVD CVSS v2 base score of 10.0 (HIGH). There are no prov...

CVE-2002-1822

CVE-2002-1822 concerns IBM HTTP Server 1.0 on AS/400, where remote attackers can obtain the web root path and other sensitive information. The leak occurs via an error message when requesting a non-existent JSP page. The vulnerability is documented with a NVD CVSS v2 base score of 5.0 (Medium) an...

CVE-2005-1822

Qualiteam X-Cart 4.0.8 is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via various parameters (home.php: cat, printable; product.php: productid, mode; error_message.php: id; help.php: section; orders.php: mode; register.ph...

CVE-2004-1822

CVE-2004-1822 affects Phorum 3.1–5.0.3 beta and involves multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the HTTP_REFERER parameter to login.php, (2) the HTTP_REFERER parameter to register.php, or (3) the target...

CVE-2002-1822

IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page JSP...