DuBose Web Group CMS Cross Site Scripting

Cross Site Scripting on DuBose Web Group CMS Risk: Low CWE number: CWE-79 Date: 19/04/2014 Vendor: www.duboseweb.com Author: Felipe Gabriel Renzi Contact: [email protected] Tested on Windows 8 pro Vulnerable File: product.php Exploit: http://host/path/product.php?pname=xss PoC: - Target:...

[SECURITY] Fedora 19 Update: java-1.7.0-openjdk-1.7.0.60-2.4.7.0.fc19

The OpenJDK runtime environment...

Fedora 19 : cacti-0.8.8b-5.fc19 (2014-4928)

Patches for four CVEs. This update fixes SQL injection, shell escaping issues, a stored XSS attack, and use of exec-like function calls without safety checks allowing arbitrary command execution. Note that Tenable Network Security has extracted the preceding description block directly from the...

[SECURITY] Fedora 19 Update: cacti-0.8.8b-5.fc19

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

Fedora Update for mingw-openssl FEDORA-2014-4999

Check for the Version of mingw-openssl OpenVAS Vulnerability Test Fedora Update for mingw-openssl FEDORA-2014-4999 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for mingw-openssl FEDORA-2014-4999

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : libinfinity-0.5.5-1.fc19 (2014-0797)

Fix a crash in infinoted when nmap scans the infinote port Rainer Rehak. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for squid FEDORA-2014-4800

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2014-4800 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for mingw-openjpeg FEDORA-2014-4749

Check for the Version of mingw-openjpeg OpenVAS Vulnerability Test Fedora Update for mingw-openjpeg FEDORA-2014-4749 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora 19 : php-5.5.11-1.fc19 (2014-4735)

03 Apr 2014, PHP 5.5.11 Core : - Allow zero length comparison in substrcompare Tjerk - Fixed bug 60602 procopen changes environment array Tjerk SPL : - Added feature 65545 SplFileObject::fread Tjerk cURL : - Fixed bug 66109 Can't reset CURLOPTCUSTOMREQUEST to default behaviour Tjerk - Fix...

[SECURITY] Fedora 19 Update: mingw-openssl-1.0.1e-6.fc19

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...

[SECURITY] Fedora 19 Update: php-5.5.11-1.fc19

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 19 Update: mingw-openjpeg-1.5.1-8.fc19

MinGW Windows OpenJPEG library...

[SECURITY] Fedora 19 Update: libinfinity-0.5.5-1.fc19

libinfinity is an implementation of the Infinote protocol written in GObjec t-based C...

Fedora 19 : mod_security-2.7.5-3.fc19 (2014-4720)

Fix Chunked string case sensitive issue CVE-2013-5705, RHBZ 1082904 1082905 1082906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for mod_security FEDORA-2014-4720

Check for the Version of modsecurity OpenVAS Vulnerability Test Fedora Update for modsecurity FEDORA-2014-4720 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora 19 : php-ZendFramework2-2.2.6-1.fc19 (2014-4636)

Upstream release notes: https://github.com/zendframework/zf2/releases/tag/release-2.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora Update for php-ZendFramework2 FEDORA-2014-4636

Check for the Version of php-ZendFramework2 OpenVAS Vulnerability Test Fedora Update for php-ZendFramework2 FEDORA-2014-4636 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for php-ZendFramework FEDORA-2014-4603

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2014-4603 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for kernel FEDORA-2014-4849

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2014-4849 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...