147 matches found
SuSE 11.1 Security Update : mailman (SAT Patch Number 4433)
mailman was updated to version 2.1.14 to fix several cross-site scripting XSS vulnerabilities. CVE-2011-0707 / CVE-2010-3089 / CVE-2010-3090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...
CVE-2009-3090
Technical details about CVE-2009-3090 are not publicly available in the provided documents; monitor for updates.
CVE-2008-3090
Compared to CVE-2008-2819, CVE-2008-3090 targets BlognPlus (BURO GUN +) 2.5.5 in both MySQL and PostgreSQL editions. The NVD entry documents multiple SQL injection vulnerabilities in index.php, exploitable via the (1) p, (2) e, (3) d, and (4) m parameters, allowing remote attackers to execute arb...
CVE-2007-3090
CVE-2007-3090 is rejected/not used and does not represent an active vulnerability entry.
CVE-2005-3090
The CVE-2005-3090 entry describes an XSS vulnerability in Mantis (bug_actiongroup_page.php) affecting 0.19.0a1–1.0.0a3. An attacker can inject arbitrary script/HTML via the bug summary when view_all_bug_page.php is used to delete a bug, since the summary is not quoted. No specific exploit details...
CVE-2005-3090
Cross-site scripting XSS vulnerability in bugactiongrouppage.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when viewallbugpage.php is used to delete the bug, as identified by bug0006002, a...