CentOS 4 : ImageMagick (CESA-2010:0653)

Updated ImageMagick packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 4 : ImageMagick (RHSA-2010:0653)

Updated ImageMagick packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS 5 : ImageMagick (CESA-2010:0652)

Updated ImageMagick packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

CVE-2009-4979

Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 where, 2 sort, 3 order, and 4 Match parameters...

CVE-2009-4980

Multiple cross-site scripting XSS vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 where parameter to search.php and 2 qc parameter to admin.php...

CVE-2009-4978

Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4981

CVE-2009-4981: Photokorn Gallery 1.81 contains multiple CSRF vulnerabilities that allow remote attackers to hijack administrator sessions. The available documents confirm CSRF as the issue; no further details on root cause, affected modules, or fixes are provided. Exploitation status and remediat...

CVE-2009-4995

CVE-2009-4995 describes a cross-site scripting (XSS) vulnerability in SmarterTools SmarterTrack, specifically in frmTickets.aspx. The issue allows remote attackers to inject arbitrary script or HTML via the email address field in SmarterTrack before version 4.0.3504. The public description notes ...

CVE-2009-4986

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

CVE-2009-4990

CVE-2009-4990 is an XSS vulnerability in Drupal’s Webform report module (5.x/6.x). The issue allows remote attackers to inject arbitrary web script or HTML via a submission. The connected documents confirm the affected product and vulnerability type but do not provide root-cause details, explicit...

CVE-2009-4993

LM Starmail Paidmail 2.0 is affected by CVE-2009-4993, a PHP remote file inclusion (RFI) vulnerability in home.php that allows an attacker to execute arbitrary PHP code via a URL supplied to the page parameter. The OpenVAS entry corroborates an RFI issue (and also mentions SQLi/RFI in the same pr...

CVE-2009-4978

MyBackup 1.4.0 is affected by a directory traversal vulnerability in down.php that allows reading arbitrary files via a .. in the filename parameter. The OpenVAS entry describes multiple vulnerabilities in MyBackup 1.4.0, including this directory traversal and an arbitrary PHP code execution path...

CVE-2009-4983

CVE-2009-4983 affects Silurus Classifieds 1.0 with multiple XSS flaws that allow remote attackers to inject arbitrary script/HTML via ID parameters in category.php and wcategory.php, and the keywords parameter in search.php. The connected sources corroborate the issue across Red Hat, NVD, and CVE...

CVE-2009-4987

CVE-2009-4987 affects Scripteen Free Image Hosting Script 2.3. The issue allows remote unauthenticated users to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a flow noted as a different vector from CVE-2008-3211. The available documents do not spec...

CVE-2009-4994

SmarterTools SmarterTrack is affected by an XSS vulnerability (CVE-2009-4994) in frmKBSearch.aspx, exploitable before version 4.0.3504. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter, with no authentication required and no confidentiality loss sp...

CVE-2009-4994

Cross-site scripting XSS vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2009-4981

Multiple cross-site request forgery CSRF vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administrators...

CVE-2009-4991

Cross-site scripting XSS vulnerability in users/resumeregister.php in Omnistar Recruiting allows remote attackers to inject arbitrary web script or HTML via the job2 parameter...

CVE-2009-4989

The CVE-2009-4989 entry concerns an XSS vulnerability in AJ Auction Pro OOPD 3.0, specifically in index.php where the txtkeyword parameter in a search action can be exploited to Inject arbitrary web-script/HTML. Affected component: index.php of AJ Auction Pro OOPD 3.0. Underlying cause: cross-sit...

CVE-2009-4977

CVE-2009-4977 affects MyBackup 1.4.0, with a PHP remote file inclusion vulnerability in index.php that allows remote authenticated users to execute arbitrary PHP code via the main_content URL parameter. OpenVAS notes also indicate a broader set of vulnerabilities in MyBackup 1.4.0, including arbi...