CVE-2012-2129

CVE-2012-2129 is a documented cross-site scripting (XSS) vulnerability in DokuWiki (2012-01-25 Angua) where the target parameter in an edit action can inject arbitrary script/HTML. Connected sources confirm this affects DokuWiki and provide CVSS 2.0/4.3 (base) metrics, with OpenVAS and Federsora ...

CVE-2012-2129

Cross-site scripting XSS vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action...

Fedora Update for dokuwiki FEDORA-2012-6630

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : dokuwiki-0-0.10.20110525.a.fc16 (2012-6628)

Fix XSS Flaw Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Update for dokuwiki FEDORA-2012-6628

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : dokuwiki-0-0.11.20110525.a.fc17 (2012-6588)

Fix XSS flaw Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2010-2129

CVE-2010-2129 is a directory traversal vulnerability in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar) versions 1.0.1 and 1.0.3, allowing remote attackers to read arbitrary files by supplying a .. in the view parameter to index.php. The issue arises from insufficient input...

CVE-2010-2129

creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12598...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-2129

Cross-site request forgery CSRF vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action...

CVE-2009-2129

Cross-site request forgery CSRF vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action...

CVE-2009-2129

CVE-2009-2129 describes a cross-site request forgery (CSRF) vulnerability in the Elvin 1.2.0 login.php that allows a remote attacker to hijack the authentication of arbitrary users via a logout action. The vulnerability is documented across multiple sources (NVD entry and CVE records) with the sa...

CVE-2009-2129

creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8953...

CVE-2008-2129

CVE-2008-2129 concerns a SQL injection in index.php of Galleristic 1.0 when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to execute arbitrary SQL commands via the cat parameter. The initial sources list the affected software version and the input vector, but do not prov...

CVE-2007-2129

CVE-2007-2129 describes an unspecified vulnerability in the Agent component of Oracle Enterprise Manager 9.2.0.8 with unknown impact and remote attack vectors (EM01). The available connected data confirms the affected product/component but does not disclose root cause, exploit details, or a remed...

CVE-2006-2129

CVE-2006-2129 describes a direct static code injection in Pro Publish 2.0. The flaw allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings stored in set_inc.php. Documents consistently identify the affected product as Pro Publish 2.0 and note that acc...

CVE-2004-2129

Technical details (affected product scope, root cause, impact, and fixes) are not publicly provided in the connected documents; monitor for updates.