Fedora 7 : bugzilla-3.0.2-0.fc7 (2007-2299)

Update to 3.0.2 for upstream vulnerabilities Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Moderate: tomcat security update

5.5.23-0jpp.3.0.2 - Patch for CVE-2007-3382 and CVE-2007-3385 Resolves: rhbz254155 5.5.23-0jpp.3.0.1 - Patch for CVE-2007-3386 Resolves: rhbz254155...

Bugzilla User.pm非授权创建帐户绕过访问验证漏洞

Bugzilla是一种流行的开源软件Bug跟踪系统。 Bugzilla的实现上存在漏洞，远程攻击者可能利用此漏洞非授权创建帐户获取对系统的访问。 Bugzilla的User.pm模块的offeraccountbyemail函数没有对createemailregexp参数做充分的检查过滤，如果系统上安装了SOAP::Lite Perl模块，那么远程攻击者可能利用此漏洞在系统上创建Bugzilla用户帐号，从而获取对系统的访问。 Mozilla Bugzilla 3.1.2 Mozilla Bugzilla 3.0.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2007-4412

Multiple cross-site scripting XSS vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 1 techs.php, 2 ticketcategory.php, 3 ticketpriority.php, 4 ticketworkflow.php, 5 ticketescalate.php, 6...

CVE-2007-4412

Multiple cross-site scripting XSS vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 1 techs.php, 2 ticketcategory.php, 3 ticketpriority.php, 4 ticketworkflow.php, 5 ticketescalate.php, 6...

CVE-2007-4413

Direct static code injection vulnerability in admincp/userhelp.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a newentry value in the do parameter...

PT-2007-3733 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Apple Safari versions 3 Beta through 3.0.2 Apple Safari on iPhone version prior to 1.0.1 Description: The issue allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain, conducting...

CVE-2007-0682

PHP remote file inclusion vulnerability in theme/includemode/template.php in JV2 Folder Gallery 3.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the galleryfilesdir parameter...

CVE-2007-0682

The CVE-2007-0682 vulnerability affects JV2 Folder Gallery 3.0.2 and earlier, where a PHP remote file inclusion flaw exists in theme/include_mode/template.php. An attacker can cause arbitrary PHP code execution by supplying a URL in the galleryfilesdir parameter. This is a server-side inclusion i...

CVE-2006-6041

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...

PT-2006-5462 · Phpopenchat · Phpopenchat

Name of the Vulnerable Software and Affected Versions: phpopenchat versions prior to 3.0.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the sourcedir parameter in the contrib/yabbse/poc.php file. A dispute regarding this issue was raised by a third-party...

MySpeach 3.0.2 - my_ms[root] Remote File Inclusion

MySpeach 3.0.2 - mymsroot Remote File Inclusion ============================================================================================== MySpeach = v3.0.2 mymsroot Remote File Inclusion Exploit ===============================================================================================...

MySpeach <= 3.0.2 (my_ms[root]) Remote File Include Vulnerability

No description provided by source. ============================================================================================== MySpeach = v3.0.2 mymsroot Remote File Inclusion Exploit =============================================================================================== Critical Level...

MySpeach 3.0.2 - 'my_ms[root]' Remote File Inclusion

============================================================================================== MySpeach = v3.0.2 mymsroot Remote File Inclusion Exploit =============================================================================================== Critical Level : Very Dangerous Venedor site :...

[SA21578] phpCodeGenie "BEAUT_PATH" File Inclusion Vulnerability

TITLE: phpCodeGenie "BEAUTPATH" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21578 VERIFY ADVISORY: http://secunia.com/advisories/21578/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: phpCodeGenie 3.x http://secunia.com/product/4141/ DESCRIPTION: Kacper has...

phpCodeGenie 3.0.2 - 'BEAUT_PATH' Remote File Inclusion

/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - phpCodeGenie app/common/lib/codeBeautifier/Beautifier/Core.php line 20-25: .... includeonce$BEAUTPATH."/Beautifier/HFile.php"; includeonce$BEAUTPATH."/Beautifier/Context.php"; class Core .... +++++++++++++++++++++++++++++++++++++++++++++++++...

vbPortal 3.0.2 <= 3.6.0 b1 (cookie) Remote Code Excution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "vbPortal 3.0.2 = 3.6.0 Beta 1 Remote Command Excution \r\n"; echo "By R00tATI Mail : havoc1988 at gmail dot com \r\n"; echo "Thank you Minus-Power \r\n"; echo "Thank you rgod for your clear samples \r\n"; echo "site:...

GlobalSCAPE Secure FTP Server <= 3.0.2 User Input Overflow Vulnerability

GlobalSCAPE Secure FTP Server is prone to a buffer overflow vulnerability due to mishandling the user-supplied input. SPDX-FileCopyrightText: 2005 SensePost Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

OpenSSH < 3.0.2 'UseLogin Environment Variables' RCE Vulnerability

OpenSSH is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2005 by EMAZE Networks S.p.A. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

JGSvulns.txt

SePro Bugtraq WBB Portal - JGS-Portal = 3.0.2 - Multiple Vulnerabilities 09.05.05 Vendor: JGS-XA URL: http://www.jgs-xa.de/ Version: = 3.0.2 Type: SQL-Injections, XSS and Full Path Disclosures Discovered by deluxe89 and the Security-Project Team Description: ------------------------- The JGS-Port...