SuSE 10 Security Update : libpng (ZYPP Patch Number 2325)

The sPLT chunk handling in libpng was incorrect and a handcrafted PNG file could be use to cause an out-of-bounds read, effectively crashing the PNG viewer or webbrowser. CVE-2006-5793 Additionally a 2 byte stackoverflow was fixed which we do not believe to be exploitable. It will cause an abort ...

CVE-2007-2325

PHP remote file inclusion vulnerability in include.php in MyNewsGroups : allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

CVE-2007-2325

The CVE is a concrete PHP remote file inclusion vulnerability (CVE-2007-2325) in the MyNewsGroups project. Exploitation path: via include.php, using a URL provided in the myng_root parameter, enabling remote code execution. Affected component is include.php in MyNewsGroups; underlying cause is RF...

CVE-2006-2325

CVE-2006-2325 describes a cross-site scripting (XSS) vulnerability in index.php of the OnlyScript.info Online Universal Payment System Script. It allows remote attackers to inject arbitrary web script or HTML via the read parameter, with the note that the issue might originate from directory trav...

CVE-2004-2325

CVE-2004-2325 describes a cross-site scripting (XSS) vulnerability in the EditModule.aspx page of DotNetNuke (formerly IBuySpy Workshop), affecting versions 1.0.6 through 1.0.10d. The flaw allows remote attackers to inject arbitrary web script or HTML. The provided documents identify the affected...

CVE-2005-2325

CVE-2005-2325 affects Clever Copy 2.0 and 2.0a. The vulnerability allows remote attackers to disclose the full path of the web root by directly requesting any of the listed PHP files (ticker.php, menu.php, banned.php, endlayout.php, randomhlinesblock.php, showlast.php, showlast5class1.php, showla...