90 matches found
CVE-2009-2076
Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...
Gentoo Security Advisory GLSA 200605-10 (pdnsd)
The remote host is missing updates announced in advisory GLSA 200605-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-2076
The CVE-2008-2076 entry concerns ActualAnalyzer Lite 2.78 from ActualScripts. Affected component: admin.php; vulnerability type: Local File Inclusion via the style parameter. Root cause: inadequate sanitization allows a “..” path traversal to include arbitrary local PHP files, enabling remote att...
CVE-2007-2076
CVE-2007-2076 affects Maian Gallery 1.0 (index.php) via a PHP remote file inclusion vulnerability in the path_to_folder parameter, allowing an attacker to execute arbitrary PHP code. The issue was described as existing only briefly in v1.0 and was confirmed by the vendor, though public discussion...
CVE-2006-2076
CVE-2006-2076 affects pdnsd prior to 1.2.4. The vulnerability is a memory leak triggered by handling DNS queries with an unsupported QTYPE/QCLASS, leading to potential denial of service due to memory consumption (demonstrated by OUSPG PROTOS tests). Affected product: pdnsd (Paul Rombouts’ DNS pro...
CVE-2002-2076
CVE-2002-2076 pertains to the Lil’ HTTP server (versions 2.1 and 2.2). The connected sources confirm a directory traversal vulnerability that allows remote attackers to read arbitrary files by including a .. (dot dot) in an HTTP GET request. The root cause is input/path traversal handling in the ...
CVE-2005-2076
CVE-2005-2076 affects HP Version Control Repository Manager (VCRM) prior to 2.1.1.730. The root cause is improper handling of the '@' character in a proxy password, which could allow attackers with physical access to see portions of the password when it is displayed on screen. Multiple connected ...
CVE-2004-2076
The CVE-2004-2076 entry describes a cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.0.0 RC4 identified via search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the query parameter, enabling possible theft of cookies or sessio...
