86 matches found
SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 3131)
This update of ImageMagick fixes three integer overflow in DCM and XWD code. These bugs can be exploited remotely via other application. CVE-2007-1667 / CVE-2007-1797 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2007-3131
Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2007-3131
Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2007-3131
CVE-2007-3131 : The vulnerability is a Cross-site Scripting (XSS) flaw in Light Blog 4.1 prior to 20070606, reported in CVE-2007-3131. It affects add_comment.php where an attacker can supply a crafted id parameter to inject arbitrary web script or HTML. According to NVD, the impact is partial int...
CVE-2006-3131
Clubpage is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue arises in the web application’s PHP files where user-supplied parameters can be injected: (1) news_archive, (2) language, and (3) intranetLogin in index.php; (4) sites_id in sites.php; and (5) news_id in news_m...
CVE-2005-3131
Summary (CVE-2005-3131) : Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (and possibly earlier) allow remote attackers to inject arbitrary web script or HTML. The issues arise via the (1) id parameter to blank.html and (2) createdataCX ...