Cross site scripting

Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...

CVE-2009-0934

Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...

CVE-2009-0934

Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...

DEBIAN-CVE-2009-0934

Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs...

PT-2008-6770 · Netatalk +1 · Netatalk +1

Name of the Vulnerable Software and Affected Versions: Netatalk versions prior to 2.0.4-beta2 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a print request. This can be achieved by using certain variables in a pipe command for the print...

[SECURITY] Fedora 8 Update: galeon-2.0.4-7.fc8.3

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

Unrestricted file upload

Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICSPATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the...

CVE-2008-5677

Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICSPATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the...

Fedora 9 : gnutls-2.0.4-4.fc9 (2008-9530)

Tue Nov 11 2008 Tomas Mraz 2.0.4-4 - fix chain verification issue CVE-2008-4989 470079 - Tue May 20 2008 Tomas Mraz 2.0.4-3 - fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 447461, 447462, 447463 Note that Tenable Network Security has extracted the preceding description block...

[SECURITY] Fedora 8 Update: galeon-2.0.4-5.fc8.3

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

Gentoo Security Advisory GLSA 200511-07 (OpenVPN)

The remote host is missing updates announced in advisory GLSA 200511-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-01 (Linpopup)

The remote host is missing updates announced in advisory GLSA 200501-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.1 security and enhancement update

Red Hat Application Stack v2.1 is now available. This update fixes various security issues and adds several enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat Application Stack is an integrated open source application...

chicomas.2.0.4

Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...

chicomas204-xss.txt

Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...

Chicomas 2.0.4 - index.php Cross-Site Scripting

Chicomas 2.0.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29025/info ChiCoMaS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Chicomas 2.0.4 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29025/info ChiCoMaS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Directory traversal

Directory traversal vulnerability in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the operation parameter to the default URI under install/...

CVE-2008-2016

The CVE-2008-2016 entry concerns Chilek Content Management System (ChiCoMaS) 2.0.4. The vulnerability is a PHP remote file inclusion via the lang parameter to the default URI under install/, enabling remote attackers to execute arbitrary PHP code. The note indicates this can also be leveraged to ...

chicomas-rfilfi.txt

Author: Hadi Kiamarsi Exploit By : Hadi Kiamarsi Email : [email protected] CMS: chicomas.2.0.4 Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip web site : http://ircrash.com File Inclusion Local & Remote Bugs : Local File Inclusion:...