233 matches found
SquirrelMail多个表单跨站请求伪造漏洞
CVECAN ID: CVE-2009-2964 SquirrelMail是一款PHP编写的WEBMAIL程序。 SquirrelMail没有正确地过滤用户向多个表单（发送消息、更改偏好等）所提交的内容，远程攻击者可以通过跨站请求伪造攻击执行删除邮件、发送邮件等操作。以下是受影响的页面： functions/mailboxdisplay.php src/addrbooksearchhtml.php src/addressbook.php src/compose.php src/folders.php src/folderscreate.php src/foldersdelete.php...
CVE-2009-2964
Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...
Fedora 11 : squirrelmail-1.4.19-2.fc11 (2009-8822)
Implemented page referal verification mechanism. Secunia Advisory SA34627 - Implemented security token system. Secunia Advisory SA34627 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 10 : squirrelmail-1.4.19-2.fc10 (2009-8797)
Implemented page referal verification mechanism. Secunia Advisory SA34627 - Implemented security token system. Secunia Advisory SA34627 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Gentoo Security Advisory GLSA 200509-20 (AbiWord)
The remote host is missing updates announced in advisory GLSA 200509-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-2964
creationtimestamp| type| source ---|---|--- 2008-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5911...
CVE-2007-2964
The CVE concerns F-Secure Policy Manager Server (7.00 and earlier) where the fsmsh.dll host module can be triggered to cause a denial of service (application crash) by sending URLs containing NTFS reserved words. The vulnerability is a DoS condition affecting the server via the fsmsh.dll CGI modu...
CVE-2006-2964
The CVE-2006-2964 entry concerns Xtreme Scripts Download Manager (aka Xtreme Downloads) v1.0. It documents multiple PHP remote file inclusion flaws in six scripts—download.php, manager.php, admin/scripts/category.php, includes/add_allow.php, admin/index.php, and admin/admin/login.php—where an att...
[SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 894-1 [email protected] http://www.debian.org/security/ Martin Schulze November 14th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 894-1 [email protected] http://www.debian.org/security/ Martin Schulze November 14th, 2005 http://www.debian.org/security/faq -...
CVE-2005-2964
Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism...
CVE-2005-2964
AbiWord (GTK2) contains a stack-based buffer overflow in the RTF import mechanism that can allow arbitrary code execution. Affected: AbiWord versions before 2.2.10. Impact: remote code execution with no user interaction required. Remediation: upgrade to AbiWord 2.2.10 or later as indicated by mul...