CVE-2012-4022

Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment...

CVE-2012-4023

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Code injection

Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment...

CVE-2012-4022

CVE-2012-4022 affects Pebble prior to 2.6.4. A specially crafted comment can cause arbitrary blog entries to become unviewable due to an issue in comment processing. The impact is loss of blog-entry viewability, with no explicit exploitation details provided in the documents. Remediation recommen...

CVE-2012-4023

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2012-4022

Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment...

JVN#39563771: Pebble vulnerable to HTTP header injection

Pebble is an open source weblog system. Pebble contains an HTTP header injection vulnerability. Impact Forged information may be displayed on the user's web browser, arbitrary scripts may be executed or arbitrary values may be set for cookies. Solution Update the software Update to the latest...

JVN#75492883: Pebble vulnerability where entries may become unviewable

Pebble is an open source weblog system. Pebble contains an issue in the processing of comments that are posted on blog entries, which may lead to a vulnerability where blog entries may become unviewable. Impact A specially crafted comment being posted may cause an arbitrary blog entry to become...

OneCMS 2.6.4 SQL Injection

=========================================================== OneCMS 2.6.4 Remote SQL insertion Vulnerability ----------------------------------------------------------- foun by :kurdish hackers team group : kurd-team contact : [email protected] site : kurdteam.org...

OneCMS 2.6.4 - Multiple SQL Injections

OneCMS 2.6.4 - Multiple SQL Injections source: https://www.securityfocus.com/bid/49733/info OneCMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

OneCMS 2.6.4 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/49733/info OneCMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

[SECURITY] Fedora 13 Update: libgdiplus-2.6.4-1.fc13

An Open Source implementation of the GDI+ API, it is part of the Mono Project...

Fedora 13 : python-2.6.4-27.fc13 (2010-9652)

Fri Jun 4 2010 David Malcolm - 2.6.4-27 - ensure that the compiler is invoked with '-fwrapv' rhbz594819 - CVE-2010-1634: fix various integer overflow checks in the audioop module patch 113 - CVE-2010-2089: further checks within the audioop module patch 114 - CVE-2008-5983: the new PySysSetArgvEx...

New vulnerability in FCKeditor

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в FCKeditor. XSS: Это persistent XSS через Flash. object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000"param name=movie value="http://site/xss.swf"param name="allowscriptaccess" value="always"embed src="http://site/xss.swf"...

Pidgin MSN Custom Smileys File Disclosure Vulnerability - Windows

Pidgin is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pidgin security update

2.6.5-1.el4.1 - 2.6.5 - CVE-2010-0013 - Other bug fixes - build with old gcc 2.6.4-4 - temporarily disable evolution integration in F13 until it is fixed 2.6.4-2 - disable SILC in EL6 builds 2.6.4-1 - 2.6.4...

CVE-2010-0013

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka custom smiley request, a related issue to CVE-2004-0122. NOTE: it cou...

CVE-2010-0013

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka custom smiley request, a related issue to CVE-2004-0122. NOTE: it cou...

Pragyan CMS 2.6.4 Remote File Inclusion

Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria Greeting To: Milw0rm Script Information: Scipt: Pragyan CMS 2.6.4 Search.php Remote File Inclusion Vulnerability Language: PHP Download: http://garr.dl.sourceforge.net/project/pragyan/pragyan/2.6.4/pragyan-2.6.4.tar.gz registerglobals...

Pragyan CMS 2.6.4 - search.php Remote File Inclusion

Pragyan CMS 2.6.4 - search.php Remote File Inclusion Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria Greeting To: Milw0rm Script Information: Scipt: Pragyan CMS 2.6.4 Search.php Remote File Inclusion Vulnerability Language: PHP Download:...