109 matches found
Gentoo Security Advisory GLSA 200807-09 (mercurial)
The remote host is missing updates announced in advisory GLSA 200807-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mercurial patch.py文件目录遍历漏洞
BUGTRAQ ID: 30072 CVECAN ID: CVE-2008-2942 Mercurial是分布式的源码管理控制系统。 Mercurial的mercurial/patch.py文件中没有正确地过滤对applydiff函数的输入参数，如果远程攻击者提交了恶意请求的话，就可以通过目录遍历攻击重新命名代码库外任意文件的名称。 Mercurial 1.0.1 Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200807-09）以及相应补丁: GLSA-200807-09：Mercurial: Directory traversal...
rPSA-2008-0211-1 mercurial mercurial-hgk
rPath Security Advisory: 2008-0211-1 Published: 2008-07-03 Products: rPath Linux 2 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: mercurial=conary.rpath.com@rpl:2/1.0.1-1-0.1 mercurial-hgk=conary.rpath.com@rpl:2/1.0.1-1-0.1 rPath Iss...
CVE-2007-2942
CVE-2007-2942 : A SQL injection vulnerability exists in the file user.php of My Little Forum 1.7 and earlier . The issue allows remote attackers to execute arbitrary SQL commands via the id parameter. The connected documents confirm the affected software and the attack vector, but do not provide ...
CVE-2006-2942
TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web, which can then be used to associate the user's login name with the WikiName of ...
CVE-2006-2942
The CVE-2006-2942 vulnerability affects TWiki 4.0.0, 4.0.1, and 4.0.2. A TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web can be exploited by remote attackers to map a user’s login name to the WikiName of a TWikiAdminGroup membe...
CVE-2006-2942
TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web, which can then be used to associate the user's login name with the WikiName of ...