102 matches found
Debian Security Advisory DSA 2097-2 (phpmyadmin)
The remote host is missing an update to phpmyadmin announced via advisory DSA 2097-2. OpenVAS Vulnerability Test $Id: deb20972.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2097-2 phpmyadmin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2097-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 11, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2097-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 11, 2010 http://www.debian.org/security/faq -...
DSA-2097-2 phpmyadmin - several vulnerabilities
Bulletin has no description...
phpMyAdmin 'CVE-2010-3055' Configuration File PHP Code Injection Vulnerability
phpMyAdmin is prone to a remote PHP code injection vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Debian DSA-2097-1 : phpmyadmin - insufficient input sanitising
Several remote vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3055 The configuration setup script does not properly sanitise its output file, which allows...
[SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2097-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 29, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2097-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 29, 2010 http://www.debian.org/security/faq -...
CVE-2010-3055
The configuration setup script aka scripts/setup.php in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request...
CVE-2010-3055
CVE-2010-3055 affects phpMyAdmin 2.11.x before 2.11.10.1. The configuration setup script (scripts/setup.php) does not properly restrict key names in its output file, enabling a remote attacker to execute arbitrary PHP code via a crafted POST request. The issue, with a CVSS v2 base score of 7.5 (H...
Insufficient output sanitizing when generating configuration file.
PMASA-2010-4 Announcement-ID: PMASA-2010-4 Date: 2010-08-20 Summary Insufficient output sanitizing when generating configuration file. Description The setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration...
CVE-2009-3055
CVE-2009-3055 affects DataLife Engine (DLE) 8.2 , with a vulnerability in engine/api/api.class.php that allows remote code execution via a URL in the dle_config_api parameter. Root cause: PHP remote file inclusion . Impact: partial impact on confidentiality , integrity , and availability as state...
CVE-2008-3055
SQL injection vulnerability in the Support view exttbl extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-3055
CVE-2008-3055 affects TYPO3’s Support view (ext_tbl) up to version 0.0.102. The vulnerability is a SQL injection in the ext_tbl component that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The provided connected documents confirm the affected software and the ...
Debian Security Advisory DSA 1017-1 (kernel-source-2.6.8)
The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1017-1. OpenVAS Vulnerability Test $Id: deb10171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1017-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.
VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...
CVE-2007-3055
Cross-site scripting XSS vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2007-3055
CVE-2007-3055 is an XSS vulnerability affecting Codelib Linker 2.0.4 and earlier. The issue is in index.php where the cat parameter can be exploited to inject arbitrary web script or HTML, enabling remote script execution in the victim’s browser. The primary sources (NVD entry) confirm the vulner...
CVE-2006-3055
Summary (CVE-2006-3055) : The vulnerability affects VBZooM 1.02, with three SQL injection points in meaning.php exploited via the parameters (1) QuranID, (2) ShowByQuranID, and (3) Action. The provided sources describe remote execution of arbitrary SQL commands due to the vulnerable inputs, indic...
[Full-disclosure] MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:235 http://www.mandriva.com/security/ Package : kernel Date : December 21, 2005 Affected: 2006.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in th...