quagga -- multiple vulnerabilities

CERT-FI reports: Five vulnerabilities have been found in the BGP, OSPF, and OSPFv3 components of Quagga. The vulnerabilities allow an attacker to cause a denial of service or potentially to execute his own code by sending a specially modified packets to an affected server. Routing messages are...

CVE-2010-3325

CVE-2010-3325 affects Microsoft Internet Explorer 6–8. It is an information-disclosure vulnerability in how IE processes CSS special characters, enabling a crafted web page to disclose content from another domain/IE zone. Attack would require the user to view a malicious page; impact is informati...

Internet Explorer CSS Special Character Information Disclosure (MS10-071; CVE-2010-3325)

CSS Cascading Style Sheets is a formatting method for Web pages using HTML. An information disclosure vulnerability has been reported in the way Microsoft Internet Explorer processes CSS special characters. The vulnerability is due to the way Internet Explorer improperly process CSS special...

CVE-2010-3325

creationtimestamp| type| source ---|---|--- 2010-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34602...

Microsoft IIS 4.0 - '.htr' Path Overflow (MS02-018) (Metasploit)

$Id: ms02018htr.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft IIS 4.0 .HTR Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...

CVE-2009-3325

SQL injection vulnerability in the Focusplus Developments Survey Manager comsurveymanager component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php...

CVE-2009-3325

CVE-2009-3325 describes an SQL injection in the Joomla! component com_surveymanager (Survey Manager) from Focusplus Developments, version 1.5.0. The vulnerability is triggered via the stype parameter in the editsurvey action to index.php, allowing remote attackers to execute arbitrary SQL command...

CVE-2009-3325

creationtimestamp| type| source ---|---|--- 2009-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9721...

Debian Security Advisory DSA 1691-1 (moodle)

The remote host is missing an update to moodle announced via advisory DSA 1691-1. OpenVAS Vulnerability Test $Id: deb16911.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1691-1 moodle Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1691-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 22, 2008 http://www.debian.org/security/faq -...

FreeBSD Ports: base

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3325

Cross-site request forgery CSRF vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page...

CVE-2008-3325

CVE-2008-3325 affects Moodle 1.6.x (before 1.6.7) and 1.7.x (before 1.7.5). The described CSRF flaw allows remote attackers to modify profile settings and gain privileges as other users via links or IMG tags to the user edit profile page. Connected sources corroborate the vulnerability in Moodle’...

Immunity Canvas: LMS_INCLUDE

Name| lmsinclude ---|--- CVE| CVE-2007-3325 Exploit Pack| CANVAS Description| LMS Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: lms.org.pl CVE Url: https://vulners.com/cve/CVE-2007-3325 CVE Name: CVE-2007-3325...

CVE-2007-3325

CVE-2007-3325 describes a PHP remote file inclusion vulnerability in LMS (LAN Management System) versions 1.9.6 and earlier. The flaw resides in lib/language.php, where an attacker can cause arbitrary PHP code execution by supplying a malicious URL via the _LIB_DIR parameter (a vector distinct fr...

CVE-2007-3325

PHP remote file inclusion vulnerability in lib/language.php in LAN Management System LMS 1.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643 and CVE-2007-2205...

CVE-2006-3325

The CVE affects the client component (cl_parse.c) of the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier. The flaw allows remote servers to send a sequence of cvar names/values that can overwrite write-protected client cvars, such as cl_allowdownload (A...

CVE-2005-3325

CVE-2005-3325 concerns SQL injection in ACID/BASE consoles (acidlab/acidbase) due to missing input sanitising and improper parameter validation. Debian and related advisories (DSA-893-1) confirm remote exploitation via base_qry_main.php/acid_qry_main.php and related console components, with fixed...