CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENTROOT check during use of the --php-docroot option, allowing directory traversal...

PT-2018-18100 · Uwsgi +1 · Uwsgi +1

Name of the Vulnerable Software and Affected Versions: uWSGI versions prior to 2.0.17 Description: The issue arises from the mishandling of a DOCUMENT ROOT check during the use of the --php-docroot option, allowing directory traversal. Recommendations: For versions prior to 2.0.17, update to...

Debian: Security Advisory (DSA-3662-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpBB <= 2.0.17 (signature_bbcode_uid) Remote Command Exploit

No description provided by source. !/usr/bin/perl phpBB = 2.0.17 remote command execution exploit need for work: 1. PHP 5 5.0.5 2. registerglobals=On 3. magicquotes off ------------------------------------------------ coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru 03.11.05 use...

phpBB remote denial of service vulnerability-vulnerability warning-the black bar safety net

phpBB remote denial of service vulnerability Vulnerability version: phpBB phpBB 3.0.8 phpBB phpBB 3.0.7 phpBB phpBB 3.0.6 phpBB phpBB 3.0.5 phpBB phpBB 3.0.4 phpBB phpBB 3.0.3 phpBB phpBB 3.0.2 phpBB phpBB 3.0.1 phpBB phpBB 3.0 phpBB phpBB 2.0.21 phpBB phpBB 2.0.19 phpBB phpBB 2.0.17 phpBB phpBB...

GLSA-201310-20 : acpid2: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201310-20 acpid2: Privilege escalation acpid2 does not properly use the pidof program in powerbtn.sh. Impact : A local attacker could gain escalated privileges. Workaround : There is no known workaround at this time. %NASLMINLEVEL...

acpid2: Privilege escalation

Background acpid2 is a daemon for Advanced Configuration and Power Interface. Description acpid2 does not properly use the pidof program in powerbtn.sh. Impact A local attacker could gain escalated privileges. Workaround There is no known workaround at this time. Resolution All acpid2 users shoul...

Security fixes related to the way XML is handled

More info at https://symfony.com/blog/security-release-symfony-2-0-17-released...

Security fixes related to the way XML is handled

More info at https://symfony.com/blog/security-release-symfony-2-0-17-released...

Security fixes related to the way XML is handled

More info at https://symfony.com/blog/security-release-symfony-2-0-17-released...

phpbb 2.0.17 安全模式绕过漏洞

No description provided by source...

phpbb 2.0.17 Sql注入

No description provided by source...

phpbb 2.0.17 安全模式绕过漏洞

No description provided by source...

phpbb 2.0.17 Security-Mode-Bypass 安全模式绕过漏洞

No description provided by source...

phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability

This host is installed with phpMyFAQ and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodphpmyfaqgetxssvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

CVE-2008-4745

Cross-site scripting XSS vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4745

CVE-2008-4745 is an XSS vulnerability in Uniwin eCart Professional 2.0.17, specifically in emailFriend.asp. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base score of 4.3 (Medium) with Network attack vector, Medium complexity, no authenti...

CVE-2005-3419

SQL injection vulnerability in usercpregister.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signaturebbcodeuid parameter, which is not properly initialized...

CVE-2005-3416

phpBB 2.0.17 and earlier, when registerglobals is enabled and the sessionstart function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $SESSION and $HTTPSESSIONVARS variables to strings instead of arrays, which causes an arraymerge functi...

CVE-2005-3419

SQL injection vulnerability in usercpregister.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signaturebbcodeuid parameter, which is not properly initialized...