Gentoo Security Advisory GLSA 200509-01 (MPlayer)

The remote host is missing updates announced in advisory GLSA 200509-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2718

Cross-site scripting XSS vulnerability in feadminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, as used in extensions such as 1 directmailsubscription, 2 feuseradmin, and 3 kbmd5fepw, allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2008-2718

TYPO3 is affected by a cross-site scripting (XSS) vulnerability in fe_adminlib.inc. The issue affects TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, including extensions such as direct_mail_subscription, feuser_admin, and kb_md5fepw. Remote attackers can inject arbitrary we...

Debian DSA-1596-1 : typo3 - several vulnerabilities

Several remote vulnerabilities have been discovered in the TYPO3 content management framework. Because of a not sufficiently secure default value of the TYPO3 configuration variable fileDenyPattern, authenticated backend users could upload files that allowed to execute arbitrary code as the...

CVE-2004-2718

PHPMyChat 0.14.5 is affected by CVE-2004-2718: an issue where setup.php3 is not removed or protected after installation, allowing direct requests to reveal sensitive information such as database passwords. Impact is partial confidentiality loss as described; no exploitation details or active expl...

CVE-2007-2718

CVE-2007-2718 describes a cross-site scripting (XSS) vulnerability in the WebMail component of Stalker CommuniGate Pro 5.1.8 and earlier when accessed via Microsoft Internet Explorer . The issue allows a remote attacker to inject arbitrary web script or HTML through crafted STYLE tags . The vulne...

CVE-2007-2718

Cross-site scripting XSS vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags...

CVE-2006-2718

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrat...

CVE-2006-2718

CVE-2006-2718 describes a vulnerability in JIWA Financials 6.4.14 where a Microsoft SQL Server account username, password, and the data source name are passed to a Crystal Reports .rpt file. This enables remote authenticated users to invoke certain stored procedures by referencing them in a user-...

CVE-2005-2718

The CVE-2005-2718 flaw is a buffer/heap overflow in ad_pcm.c of MPlayer 1.0pre7 and earlier that can be triggered by crafted PCM data in a strf chunk, allowing remote code execution. Impact is described as running arbitrary code under the user’s privileges when opening affected media. Affected ve...