181 matches found
CVE-2012-2341
The Drupal Take Control module (6.x-2.x) is affected by a CSRF vulnerability in Ajax requests that manipulate files due to insufficient validation. Versions prior to 6.x-2.2 allow remote attackers to hijack user authentication for these requests. Remediation: upgrade to Take Control 6.x-2.2 (or l...
CVE-2012-2341
Cross-site request forgery CSRF vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files...
SA-CONTRIB-2012-075 - Take Control - Cross Site Request Forgery (CSRF)
CVE: CVE-2012-2341 This module enables you to manage your Drupal file-system from within Drupal itself. The module does not sufficiently validate Ajax calls leading to possibility of a Cross Site Request Forgery CSRF attack. This vulnerability is mitigated by the fact that the attacker must be ab...
Debian: Security Advisory (DSA-2341-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2341-1 : iceweasel - several vulnerabilities
Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. - CVE-2011-3647 'mozbugra4' discovered a privilege escalation vulnerability in addon handling. -...
APPLE-SA-2011-10-12-4 Safari 5.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...
CVE-2011-2341
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2010-2341
The CVE-2010-2341 entry concerns EZPX Photoblog 1.2 beta, where a PHP remote file inclusion vulnerability in system/application/views/public/commentform.php allows an attacker to execute arbitrary PHP code by supplying a URL in the tpl_base_dir parameter. The underlying issue is improper handling...
CVE-2010-2341
PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...
CVE-2009-2341
Opial 1.0 contains an SQL injection in albumdetail.php exploitable via the albumid parameter. The vulnerability stems from insufficient input validation in Opial’s albumdetail.php, allowing remote attackers to inject arbitrary SQL commands. Public evidence in connected documents includes exploit ...
CVE-2009-2341
creationtimestamp| type| source ---|---|--- 2009-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9080...
CVE-2008-2341
The CVE-2008-2341 entry concerns News Manager 2.0, where a PHP remote file inclusion flaw exists in ch_readalso.php. An attacker can supply a URL in the read_xml_include parameter to cause remote PHP code execution. The vulnerability is classified as high severity (CVSSv2 base score 7.5) with net...
CVE-2008-2341
creationtimestamp| type| source ---|---|--- 2008-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5624...
CVE-2002-2341
CVE-2002-2341 affects SonicWALL SOHO3 version 6.3.0.0 and is described as a cross-site scripting (XSS) vulnerability in content blocking. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a specially crafted blocked URL, enabling potential session or credential...
CVE-2007-2341
CVE-2007-2341 is a PHP remote file inclusion vulnerability in phpBandManager 0.8. The issue occurs in suite/index.php where an attacker can supply a URL via the pg parameter to cause the application to execute arbitrary PHP code on the server. Documented impact is partial confidentiality, integri...
CVE-2006-2341
CVE-2006-2341 affects Symantec Gateway Security 5000 Series (versions 2.0.1 and 3.0) and Symantec Enterprise Firewall 8.0. When NAT is in use, the HTTP proxy can be abused by remote attackers to determine internal IP addresses by sending malformed HTTP requests—specifically a GET request with no ...
CVE-2005-2341
CVE-2005-2341 describes a heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service that can be triggered by viewing a crafted TIFF attachment in an e‑mail, enabling a remote attacker to cause a denial of service (hang). Affected component: BlackBerry Attachment Service...
CVE-2004-2341
PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearchpath parameter...
CVE-2004-2341
CVE-2004-2341 describes a PHP file include injection in the iSearch component, specifically isearch.inc.php, allowing remote attackers to execute arbitrary code via the isearch_path parameter. The vulnerability indicates a remote code execution impact when an attacker can influence included files...