SQL injection in Serendipity

Advisory ID: HTB23092 Product: Serendipity Vendor: Serendipity Team Vulnerable Versions: 1.6.1 and probably prior Tested Version: 1.6.1 Vendor Notification: 16 May 2012 Vendor Patch: 16 May 2012 Public Disclosure: 6 June 2012 Vulnerability Type: SQL injection CVE Reference: CVE-2012-2762 CVSSv2...

CVE-2012-2762

SQL injection vulnerability in include/functionstrackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php...

CVE-2012-2762

SQL injection vulnerability in include/functionstrackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php...

CVE-2012-2762

Vulnerability: Serendipity 1.6.2 is affected by a SQL injection in include/functions_trackbacks.inc.php, exploitable via the url parameter to comment.php. Root cause: insufficient sanitization of user-supplied input used in SQL queries, enabling arbitrary SQL commands. Impact: potential data disc...

CVE-2012-2762

SQL injection vulnerability in include/functionstrackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php...

Serendipity 1.6.1 SQL Injection

Advisory ID: HTB23092 Product: Serendipity Vendor: Serendipity Team Vulnerable Versions: 1.6.1 and probably prior Tested Version: 1.6.1 Vendor Notification: 16 May 2012 Vendor Patch: 16 May 2012 Public Disclosure: 6 June 2012 Vulnerability Type: SQL injection CVE Reference: CVE-2012-2762 CVSSv2...

Serendipity 1.6.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Product: Serendipity Vendor: Serendipity Team Vulnerable Versions: 1.6.1 and probably prior Tested Version: 1.6.1 Vendor Notification: 16 May 2012 Vendor Patch: 16 May 2012 Public Disclosure: 6 June 2012 Vulnerability Type: SQL injection CVE...

CVE-2011-2762

The LifeSize Room appliance LS_RM1_3.5.3 (11) web interface is affected by an authentication bypass vulnerability in gateway.php via LSRoom_Remoting.authenticate that lets an unauthenticated attacker gain admin access by tampering AMF data. A separate issue allows unauthenticated command executio...

LifeSize Room Vulnerabilities

Discovered: 07-13-11 By: Spencer McIntyre zeroSteiner SecureState R&D Team www.securestate.com Background: ----------- Multiple vulnerabilities within the LifeSize Room appliance. Vulnerability Summaries: ------------------------ Login page can be bypassed, granting administrative access to the w...

Mozilla Products 'SJOW' Arbitrary Code Execution Vulnerability (MFSA2010-59) - Windows

Mozilla Firefox/Thunderbird are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2762

CVE-2010-2762 affects Mozilla Firefox 3.6.x (prior to 3.6.9) and Thunderbird 3.1.x (prior to 3.1.3). The issue lies in the SafeJSObjectWrapper (SJOW) implementation: the XPCSafeJSObjectWrapper class does not properly restrict objects at the end of scope chains, enabling remote attackers to execut...

firefox, nspr, nss, xulrunner security update

CentOS Errata and Security Advisory CESA-2010:0681 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVS...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

WordPress-MU < 2.8.4 'wp-login.php' Security Bypass Vulnerability

WordPres-MU is prone to a security bypass vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

FreeBSD Ports: wordpress

The remote host is missing an update to the system as announced in the referenced advisory. VID 2430e9c3-8741-11de-938e-003048590f9e OpenVAS Vulnerability Test $ Description: Auto generated from VID 2430e9c3-8741-11de-938e-003048590f9e Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: wordpress

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-2762

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key array variable in a resetpass aka rp action, which bypasses a check that assumes that $key is not an array...

CVE-2009-2762

CVE-2009-2762 affects WordPress ≤ 2.8.3. The vulnerability allows remote attackers to trigger a password reset for the first user (potentially admin) by supplying a key[] array to the resetpass (rp) action, bypassing the check that key is not an array. This is a network‑level exploit with a CVSSv...

WordPress < 2.8.4 'wp-login.php' 'key' Parameter Remote Administrator Password Reset (uncredentialed check)

According to its version number, the version of WordPress running on the remote server has a flaw in the password reset mechanism. Validation of the secret user activation key can be bypassed by providing an array instead of a string. This allows anyone to reset the password of the first user in...

CVE-2004-2762

The CVE refers to IBM Tivoli Storage Manager (TSM) server on multiple tracks: 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1. When the HTTP communication method is enabled, remote attackers can cause a ...