newt security update

0.52.2-12.el54.1 - fix buffer overflow in textbox when reflowing 524618, CVE-2009-2905...

[USN-837-1] Newt vulnerability

=========================================================== Ubuntu Security Notice USN-837-1 September 24, 2009 newt vulnerability CVE-2009-2905 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubun...

CVE-2008-2905

Summary: CVE-2008-2905 is a PHP remote file inclusion vulnerability in the Cache_Lite Output.php used by Mambo 4.6.4 and earlier. The root cause is an RFI in includes/Cache/Lite/Output.php when register_globals is enabled, allowing an attacker to specify a URL via the mosConfig_absolute_path para...

Mambo Cache_Lite Class mosConfig_absolute_path Remote File Include

This module exploits a remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the CacheLite package in Mambo 4.6.4 and earlier. Module Options msf use exploit/unix/webapp/mambo/cachelite msf undefinedcachelite show actions ...actions... msf undefinedcachelite set ACTION msf...

Mambo 4.6.4 - Cache Lite Output Remote File Inclusion (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'Mambo...

CVE-2008-2905

creationtimestamp| type| source ---|---|--- 2008-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5808 2008-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9906 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16912 2018-05-29...

CVE-2007-2905

CVE-2007-2905 is a reported SQL injection vulnerability in the 2z Project 0.9.5, affecting the includes/rating.php component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the post_id parameter. Multiple connected sources corroborate this flaw. The documents do n...

CVE-2006-2905

Partial Links 1.2.2 is affected. Remote attackers can disclose sensitive information by requesting page_footer.php or page_header.php, which reveals the path in an error message. The provided documents do not specify a fix or workaround.

CVE-2023-2905

creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2023-08-08 16:37:00+00:00| seen| http://takeonme.org/cves/cve-2023-2905/ 2023-08-09 12:16:21+00:00| seen| https://t.me/cibsecurity/68075...