Fedora Update for php-ZendFramework FEDORA-2014-4603

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2014-4603 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Linux Security Advisory : php-ZendFramework (MDVSA-2014:072)

Updated php-ZendFramework packages fix security vulnerabilities : XML eXternal Entity XXE and XML Entity Expansion XEE flaws were discovered in the Zend Framework. An attacker could use these flaws to cause a denial of service, access files accessible to the server process, or possibly perform...

Cisco Linksys E4200 Firmware - XSS/LFI Vulnerabilities

Exploit for hardware platform in category web applications ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL: http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html...

CMS Made Simple 1.6.2 LFI Vulnerability - Active Check

CMS Made Simple is prone to a local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-2682

Directory traversal vulnerability in the Realtyna Translator comrealtyna component 1.0.15 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2682

Summary: Affected: Joomla! extension Realtyna Translator (com_realtyna) 1.0.15. Vulnerability: Local File Inclusion via directory traversal using ".." in the controller parameter to index.php. Impact: could read arbitrary files and potentially other unspecified impacts on the Joomla site. Evidenc...

CVE-2009-2682

CVE-2009-2682 describes an unspecified local vulnerability in HP-UX RBAC that could let a local user bypass access restrictions on HP-UX B.11.23 and B.11.31. Related OpenVAS/NVD entries confirm HP-UX RBAC components (RBAC-CONF, RBAC-RUN, RBAC-WEB) as affected, with the HP Security Bulletin HPSBUX...

CVE-2008-2682

CVE-2008-2682 affects Realm CMS 2.3 and earlier (RealmAdmin/login.asp). The vulnerability allows remote attackers to bypass authentication and access admin pages by manipulating cookies (likely cUserRole, cUserName, cUserID). Public references indicate exploitation exists (e.g., exploit-db entry)...

CVE-2008-2682

creationtimestamp| type| source ---|---|--- 2008-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5766...

CVE-2004-2682

Affected software: PeerSec MatrixSSL prior to 1.1. Vulnerability: does not implement RSA blinding, enabling context-dependent attackers to deduce the server’s private key via timing differences in Montgomery reductions and in the use of different multiplication algorithms (Karatsuba vs normal). T...

CVE-2007-2682

The CVE-2007-2682 issue affects Adobe Version Cue CS3 Server on Mac OS X (CS3). The installer fails to re-enable the personal firewall after installation, which can allow remote attackers to bypass firewall rules intended to restrict access. The vulnerability is demonstrated by the product’s inst...

CVE-2006-2682

CVE-2006-2682 concerns a PHP remote file inclusion in Back-End CMS. The affected product is Back-End CMS 0.7.2.1 and earlier, where the vulnerability exists in BE_config.php. An attacker can supply a URL in the _PSL[classdir] parameter, enabling the execution of arbitrary PHP code on the server. ...

CVE-2005-2682

CVE-2005-2682 affects the DTLink AreaEdit SpellChecker plugin before version 0.4.3. The vulnerability arises in aspell_setup.php where remote attackers can execute arbitrary commands by supplying shell metacharacters in the dictionary parameter (aka the lang variable). This constitutes remote cod...

CVE-2004-2682

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on 1 the number of extra reductions during Montgomery reduction, and 2 the use of different integer...