259 matches found
CVE-2008-5192
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...
CVE-2008-5192
CVE-2008-5192 concerns a SQL injection vulnerability in forum.asp of W1L3D4 Philboard versions 1.14 and 1.2, exploitable via the forumid parameter. The root cause is an unsafely handled input for forumid that allows arbitrary SQL execution by an attacker. Connected records corroborate the vulnera...
FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-1939
Concrete details show SQL injection vulnerabilities in W1L3D4 Philboard components across multiple versions (e.g., 0.5, 1.0, 1.14, 1.2) via user-supplied parameters (forumid, id, topic) in various ASP scripts (admin/ paths and forum/ paths). The root cause is improper handling of input leading to...
CVE-2008-1939
creationtimestamp| type| source ---|---|--- 2008-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5475...
Debian Security Advisory DSA 1049-1 (ethereal)
The remote host is missing an update to ethereal announced via advisory DSA 1049-1. Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-1932 The OID printing...
CVE-2007-1939
CVE-2007-1939 describes a cross-site scripting (XSS) vulnerability in the embedded webserver of LanguageTool prior to 0.8.9. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message, potentially related to the demultiplex method i...
CVE-2007-1939
Cross-site scripting XSS vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message, possibly the demultiplex method in HTTPServer.java...
FreeBSD : fetchmail -- insecure APOP authentication (f1c4d133-e6d3-11db-99ea-0060084a00e5)
Matthias Andree reports : The POP3 standard, currently RFC-1939, has specified an optional, MD5-based authentication scheme called 'APOP' which no longer should be considered secure. Additionally, fetchmail's POP3 client implementation has been validating the APOP challenge too lightly and accept...
Debian DSA-1049-1 : ethereal - several vulnerabilities
Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...
CentOS 3 / 4 : ethereal (CESA-2006:0420)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...
ethereal security update
CentOS Errata and Security Advisory CESA-2006:0420 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Several denial of service bugs were found in Ethereal's...
[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1049-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...
Fedora Core 4 : ethereal-0.99.0-fc4.1 (2006-461)
Many security vulnerabilities have been fixed since the previous release. - The H.248 dissector could crash. Versions affected: 0.10.14. CVE: CVE-2006-1937 - The UMA dissector could go into an infinite loop. Versions affected: 0.10.12 - 0.10.14. CVE: CVE-2006-1933 - The X.509if dissector could...
CVE-2006-1939
CVE-2006-1939 is one of multiple vulnerabilities in Ethereal up to version 0.10.14. The description notes null pointer dereferences in several dissectors (ASN.1, GSM SMS, RPC, and ASN.1-based) and an invalid display filter that could cause a crash. Connected advisories confirm broader issues acro...
CVE-2005-1939
Ipswitch WhatsUp Small Business (2004) has a directory traversal vulnerability in the Report service (TCP 8022). The issue stems from insufficient sanitization of HTTP requests, allowing an unauthenticated user to read arbitrary files on the target host by crafting requests with .. sequences. The...
CVE-2004-1939
CVE-2004-1939 affects Zaep AntiSpam 2.0. The vulnerability is a cross-site scripting (XSS) flaw in the key parameter, exploitable via double-encoded slashes (%252F). The NVD metrics show a base score of 4.3 (medium) with network attack vector, no confidentiality impact, partial integrity impact, ...
