Fedora 21 : postgis-2.1.7-1.fc21 (2015-5575)

Update to latest release, which includes security fixes. Update to 2.1.6, per changes described at: http://postgis.net/2015/03/20/postgis-2.1.6 enable json-c for postigs, but disable it for upgrade part Rebuild for Proj 4.9.1 Note that Tenable Network Security has extracted the preceding...

CVE-2014-9317

CVE-2014-9317 affects FFmpeg’s libavcodec/pngdec.c decode_ihdr_chunk. An IDAT before an IHDR in a PNG can trigger an out-of-bounds heap access, leading to a denial of service (and possibly other impact). Affected FFmpeg versions are 2.x up to 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4. De...

myBloggie 2.1.6 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. netVigilance Security Advisory 40 myBloggie version 2.1.6 Multiple SQL Injection Vulnerability Description: myBloggie http://mywebland.com/mybloggie/ is considered one of the most simple, user-friendliest yet packed with features Weblog system available to date...

CodetoSell ViArt Shop Enterprise 2.1.6 products.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

DotProject 2.1.5 SQL Injection / Cross Site Scripting

DotProject version 2.1.5 suffers from cross site scripting and remote SQL injection vulnerabilities. Information -------------------- Name : XSS and SQL Injection Vulnerabilities in DotProject Software : DotProject 2.1.5 and possibly below. Vendor Homepage : http://www.dotproject.net Vulnerabilit...

myBloggie 2.1.6 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: myBloggie 2.1.6 CSRF Vulnerability Date: 17/8/2012 Author: LolzSec Software Link: http://mywebland.com/download.php?id=19 Category:: webapps Greetings to: DaOne , All LCA Members , email protected CSRF Add Admin 0day.today...

CVE-2012-2355

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use capability requirements and add arbitrary questions to a quiz via the questions feature...

Cross site scripting

Cross-site scripting XSS vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title...

UBUNTU-CVE-2012-2361

Cross-site scripting XSS vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the name field aka the service name to...

Teampass <= v2.1.6 Arbitrary File Upload / Export decrypt passwords

Exploit for php platform in category web applications Vendor or Software Link: https://github.com/nilsteampassnet/TeamPass Version: connect; // Get all accounts $rows = $db-fetchallarray" SELECT i.id AS id, i.restrictedto AS restrictedto, i.perso AS perso, i.label AS label, i.description AS...

PT-2011-4734 · Pixiv · Pixiv Custom Theme

Name of the Vulnerable Software and Affected Versions: Pixiv Custom theme versions prior to 2.1.6 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the s parameter. Recommendations: For versions prior to...

myBloggie 2.1.6 SQL-Injection, Advanced INSERT INTO Injection technique

myBloggie 2.1.6 SQL-Injection, Advanced INSERT INTO Injection technique Software: myBloggie 2.1.6 Severity: High Author: Robin Verton info at robinverton dot de Date: Jun. 12 2011 Vendor: http://mybloggie.mywebland.com/ Software Description: "myBloggie is considered one of the most simple,...

myBloggie 2.1.6 SQL Injection

myBloggie 2.1.6 SQL-Injection, Advanced INSERT INTO Injection technique Software: myBloggie 2.1.6 Severity: High Author: Robin Verton Date: Jun. 12 2011 Vendor: http://mybloggie.mywebland.com/ Software Description: "myBloggie is considered one of the most simple, user-friendliest yet packed with...

MyBloggie 2.1.6 - HTML Injection SQL Injection

MyBloggie 2.1.6 - HTML Injection SQL Injection source: https://www.securityfocus.com/bid/48317/info myBloggie is prone to a SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...

MyBloggie 2.1.6 - HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/48317/info myBloggie is prone to a SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

myBloggie 2.1.6 Remote File Inclusion

======================================================= myBloggie 2.1.6 - Remote file Inclusion Exploit ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L...

Mosets Tree 2.1.6 (Joomla) Template Overwrite CSRF

Exploit for php platform in category web applications ================================================== Mosets Tree 2.1.6 Joomla Template Overwrite CSRF ================================================== '; / page - any one of: pageaddCategory pageaddListing pageadvSearchRedirect...

ewebeditor asp version 2.1.6 upload exploits procedures-vulnerability warning-the black bar safety net

H1ewebeditor asp version 2.1.6 upload exploits procedures----/H1brbr form action="http://127.1/e/upload.asp?action=save&type=IMAGE&style=luoye' union select SID,SName,SDir,SCSS,SUploadDir,SWidth,SHeight,SMemo,SIsSys,SFileExt,SFlashExt,...

Invision Power Board 'name'参数SQL注入漏洞

BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...

Woltlab Burning Board UserGroups.PHP SQL注入漏洞

Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...