CVE-2010-2155

CVE-2010-2155 covers cross-site scripting in ZoneCheck 2.1.0 (zn: zc/publisher/html.rb), enabling remote script/HTML injection via (xmlnode.value, zc-error text, $zc_version, domainname in a zc-title row). Connected advisories confirm this issue and note the impact as XSS. Remediation: Debian fix...

Gentoo Security Advisory GLSA 200901-08 (online-bookmarks)

The remote host is missing updates announced in advisory GLSA 200901-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200901-08 : Online-Bookmarks: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200901-08 Online-Bookmarks: Multiple vulnerabilities The following vulnerabilities were reported: Authentication bypass when directly requesting certain pages CVE-2004-2155. Insufficient input validation in the login function in...

Gentoo Security Advisory GLSA 200901-08 (online-bookmarks)

The remote host is missing updates announced in advisory GLSA 200901-08. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2007-2155

CVE-2007-2155 affects phpFaber TopSites 3. A directory traversal vulnerability in template.php (modify parameter in a template action to admin/index.php) allows remote attackers to read arbitrary files via .. traversal. This is a network-accessible issue with low attack complexity and no authenti...

CVE-2007-2155

Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a .. dot dot in the modify parameter in a template action to admin/index.php...

CVE-2006-2155

CVE-2006-2155 affects EMC Retrospect for Windows. Affected: EMC Retrospect 6.5 (versions up to 6.5.381), 7.0 (up to 7.0.343/344), and 7.5 (up to 7.5.1.105). The issue allows local users to execute arbitrary code by replacing the Retrospect.exe file, likely due to improper file permissions. KLA101...

CVE-2002-2155

CVE-2002-2155 affects Trillian (versions 0.725 and 0.73). The vulnerability is a format string issue in the error handling of IRC invite responses, enabling a remote attacker (IRC server) to cause arbitrary code execution by sending an invite to a channel whose name contains format specifiers. Do...

CVE-2002-2155

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name...

CVE-2004-2155

CVE-2004-2155 affects Online-Bookmarks prior to 0.4.6. The vulnerability allows remote attackers to bypass authentication by issuing direct requests to (config/*, bookmarks.php, footer.php, main.php, tree.php, or functions.php). The issue is a direct authentication bypass without requiring user i...

CVE-2004-2155

Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to 1 config/, 2 bookmarks.php, 3 footer.php, 4 main.php, 5 tree.php, or 6 functions.php...

CVE-2002-2155

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name...