CVE-2011-1952

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service infinite loop via malformed HTML markup, as demonstrated by an a sequence...

Post Revolution 0.8.0c Multiple Remote Vulnerabilities

info ——————————— Name : Post Revolution 0.8.0c Multiple Remote Vulnerabilities Class: Design Error && Input Validation Error CVE: CVE-2011-1952, CVE-2011-1953, CVE-2011-1954 Remote: Yes Local: No Credit : Javier Bassi javierbassi at gmail dot com Vulnerable : All versions prior to and including...

Post Revolution 0.8.0c XSS / XSRF / Denial Of Service

info ——————————— Name : Post Revolution 0.8.0c Multiple Remote Vulnerabilities Class: Design Error && Input Validation Error CVE: CVE-2011-1952, CVE-2011-1953, CVE-2011-1954 Remote: Yes Local: No Credit : Javier Bassi Vulnerable : All versions prior to and including 0.8.0c are affected. Vendor...

CVE-2010-1952

Directory traversal vulnerability in the BeeHeard combeeheard and BeeHeard Lite combeeheardlite component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1952

Directory traversal vulnerability in the BeeHeard combeeheard and BeeHeard Lite combeeheardlite component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1952

Joomla! BeeHeard components (com_beeheard and com_beeheardlite) version 1.0 are affected by a local file inclusion (LFI) through directory traversal. The vulnerability allows remote attackers to read arbitrary files by supplying .. in the controller parameter to index.php. This is a confirmed LFI...

Debian DSA-1952-1 : asterisk - several vulnerabilities, end-of-life announcement in oldstable

Several vulnerabilities have been discovered in asterisk, an Open Source PBX and telephony toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0041 It is possible to determine valid login names via probing, due to the IAX2 response from asteris...

Debian Security Advisory DSA 1952-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1952-1. OpenVAS Vulnerability Test $Id: deb19521.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1952-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1952

CVE-2009-1952 concerns multiple SQL injection vulnerabilities in the administrative login feature of PropertyMax Pro FREE 0.3. The root cause is improper handling of user-supplied inputs in the login process when magic_quotes_gpc is disabled, enabling remote attackers to craft (username, password...

CVE-2009-1952

creationtimestamp| type| source ---|---|--- 2009-06-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8858...

RedHat Update for xen RHSA-2008:0892-01

Check for the Version of xen OpenVAS Vulnerability Test RedHat Update for xen RHSA-2008:0892-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RHEL 5 : xen (RHSA-2008:0892)

Updated xen packages that resolve a couple of security issues and fix a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xen packages contain tools for managing the virtual machine monit...

xen security and bug fix update

3.0.3-64.el52.3 - Fix overflow in qemu-img rhbz 454651 3.0.3-64.el52.2 - Correctly limit PVFB size CVE-2008-1952 rhbz 447760 - Disable QEMU USB disk image format auto-detection CVE-2008-1945 rhbz 445845...

CVE-2008-1952

CVE-2008-1952 affects the Xen PVFB backend: the para-virtualized framebuffer backend in Xen ioemu does not properly restrict the frame buffer size, allowing a local attacker to crash the guest by mapping an arbitrary amount of guest memory (denial of service). The MiracleLinux advisories describe...

CVE-2007-1952

CVE-2007-1952 concerns the onelook onebyone CMS . The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting a PHPSESSID cookie. The description explicitly ties the issue to session fixation via PHPSESSID, enabling partial confidentiality and integ...

CVE-2006-1952

The CVE-2006-1952 entry describes a directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier. The issue allows remote attackers to read arbitrary files by using triple dot sequences ("...") in a GET request. Root cause is improper handling of path traversal, enabling...

CVE-2002-1952

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable...

CVE-2002-1952

The vulnerability concerns phpRank 1.8, where authentication does not properly check return codes from MySQL operations. This can allow remote attackers to authenticate with a NULL password when a database error occurs or the database is unavailable. The affected component is the authentication p...

CVE-2005-1952

CVE-2005-1952 affects Pico Server (pServ) 3.3. A directory traversal flaw allows remote attackers to read arbitrary files and, via a crafted URL containing /./ before each .. sequence, potentially execute arbitrary commands due to an incorrect directory depth count. Exploitation details are not p...

CVE-2004-1952

The CVE-2004-1952 entry describes a SQL injection vulnerability in Advanced Guestbook 2.2. The vulnerability affects the product’s password handling, allowing remote attackers to execute arbitrary SQL commands and gain privileges. CVSS v2 base score is 7.5 (HIGH) with network attack vector, low a...