CVE-2011-3711

BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/libs/javascript.inc.php and certain other files...

CVE-2011-3711

The CVE-2011-3711 entry describes a vulnerability in BIGACE 2.7.5 that allows remote information disclosure by requesting a PHP file directly, causing an error message that reveals the installation path (e.g., system/libs/javascript.inc.php and related files). The connected records corroborate an...

BigAce 2.7.5 content management system, FCK editor upload vulnerability-vulnerability warning-the black bar safety net

BigAce 2.7.5 content management system, FCK editor upload vulnerability BIGACE is a PHP and MySQL development of Web Content Management SystemCMS. Main or FCK editor problem. Now a lot of the station, would have been quite safe, but with these so-called editor, leading to a Cup. This is a...

BigAce 2.7.5 File Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Bigace 2.7.5 Remote File Upload Vulnerability

Exploit for php platform in category web applications InformatioN Title : Bigace 2.7.5 Remote Upload file Vulnerability Author : Net.Edit0r Vendor or Software Link : http://www.bigace.de/bigace-2.7.5.html Email : email protected Data : 2011-03-29 Google dork: "Powered by Bigace 2.7.5" Category:...

Fedora 12 : pidgin-2.7.5-1.fc12 (2010-17130)

New release 2.7.5 Full Upstream ChangeLog : - http://developer.pidgin.im/wiki/ChangeLogversion2.7.410 202010 - http://developer.pidgin.im/wiki/ChangeLogversion2.7.5 10312010 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...

CVE-2008-0877

Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...

Jinzora 2.7.5 - index.php Multiple Cross-Site Scripting Vulnerabilities

Jinzora 2.7.5 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage...

Jinzora 2.7.5 - 'slim.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Jinzora 2.7.5 - 'ajax_request.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Jinzora 2.7.5 - popup.php Multiple Cross-Site Scripting Vulnerabilities

Jinzora 2.7.5 - popup.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage...

Jinzora 2.7.5 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

DSA-1176-1 zope2.7

Bulletin has no description...

DEBIAN-CVE-2005-3534

Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...

[SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion

-------------------------------------------------------------------------- Debian Security Advisory DSA 910-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2005 http://www.debian.org/security/faq -...