FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. VID b9ec7fe3-a38a-11de-9c6b-003048818f40 OpenVAS Vulnerability Test $ Description: Auto generated from VID b9ec7fe3-a38a-11de-9c6b-003048818f40 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-3125

SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2009-3166

Bugzilla 3.4rc1–3.4.1 vulnerability: token.cgi places a password in the login URL after a reset, allowing context-dependent attackers to obtain passwords via web server access logs, Referer logs, or browser history. The provided documents confirm Bugzilla involvement and CVE-2009-3166, but do not...

Arbitrary file deletion

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file...

CVE-2008-3929

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file...

Acidcat CMS 3.4.1 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor: www.acidcat.com Vulnerable Version: 3.4.1 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/36 1. Description: Acidcat...

Design/Logic Flaw

Eval injection vulnerability in environment.php in Olate Download od 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the 1 PDO::ATTRSERVERVERSION or 2 PDO::ATTRCLIENTVERSION attribute...

CVE-2007-4454

CVE-2007-4454 affects Olate Download (od) 3.4.1 via an eval injection in environment.php. A crafted version string can cause code execution, using either PDO::ATTR_SERVER_VERSION or PDO::ATTR_CLIENT_VERSION. The available documents confirm the vulnerability and potential impact; no remediation de...

CVE-2007-4421

SQL injection vulnerability in Admin.php in Olate Download od 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3AutoLogin cookie...

CVE-2007-4421

SQL injection vulnerability in Admin.php in Olate Download od 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3AutoLogin cookie...

Olate Download 3.4.1 - admin.php Remote Authentication Bypass

Olate Download 3.4.1 - admin.php Remote Authentication Bypass source: https://www.securityfocus.com/bid/25343/info Olate Download is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain administrative access to the affected application. Successfully exploiti...

CVE-2007-3082

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...

Sendcard 3.4.1 - Local File Inclusion Remote Code Execution

Sendcard 3.4.1 - Local File Inclusion Remote Code Execution !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Sendcard = 3.4...

CVE-2007-2472

Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2472

Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Fedora Core 4 : kdenetwork-3.4.1-0.fc4.2 (2005-624)

Multiple integer overflow flaws were found in the way Kopete processes Gadu-Gadu messages. A remote attacker could send a specially crafted Gadu-Gadu message which would cause Kopete to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project assigned the name...

A Phorum's bug...

Hi! I have founded a bug in Phorum http://phorum.org/. It is possible to inject script code or other html-tag into "subject", "author's name" or "author's e-mail" of a message in Phorum. In the subject name, e-mail input of message you need to write any html-tag like this:...