CVE-2010-3742

CVE-2010-3742 describes multiple PHP remote file inclusion vulnerabilities in Free Simple CMS 1.0, specifically in themes/default/index.php. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the (1) meta or (2) phpincdir parameter, as reported (di...

CVE-2010-3742

creationtimestamp| type| source ---|---|--- 2010-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14672...

CVE-2009-3742

Cross-site scripting XSS vulnerability in Liferay Portal before 5.3.0 allows remote attackers to inject arbitrary web script or HTML via the ppid parameter...

CVE-2009-3742

CVE-2009-3742 affects Liferay Portal prior to 5.3.0, where the p_p_id parameter can be exploited to inject arbitrary script/HTML (persistent XSS). The root cause is inadequate sanitization of the p_p_id value, allowing remote attackers to execute script in a user’s context. A fix is available in ...

Fedora Update for drupal FEDORA-2008-7467

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for drupal FEDORA-2008-7626

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 9 : drupal-6.4-1.fc9 (2008-7626)

Update to 6.4, security fixes: SA-2008-047 http://drupal.org/node/295053 - multiple XSS issues CVE-2008-3740, CVE-2008-3741 - unrestricted upload vulnerability CVE-2008-3742 - multiple CSRF issues CVE-2008-3743, CVE-2008-3744 - upload module privilege escalation CVE-2008-3745 Remember to log in t...

CVE-2008-3742

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated...

CVE-2008-3742

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated...

CVE-2008-3742

CVE-2008-3742 affects Drupal’s BlogAPI module in Drupal 5.x (before 5.10) and 6.x (before 6.4). The vulnerability is an unrestricted file upload where an authenticated user can upload a file with an executable extension that is not validated, enabling arbitrary code execution. OpenVAS/Fedora advi...

CVE-2008-3742

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated...

CVE-2007-3742

This CVE-2007-3742 entry describes a URL spoofing flaw in WebKit used by Apple Safari 3 Beta (before Update 3.0.3) and iPhone (before 1.0.1). The root cause is the interaction between International Domain Name (IDN) support and Unicode fonts, which can allow remote attackers to craft a URL contai...

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

Fedora Core 5 : kdebase-3.5.4-0.4.fc5 (2006-942)

fix 201507, CVE-2006-3742 second login attempt by validated user bypasses login passwords Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2006-3742

The CVE-2006-3742 issue affects the KDE PAM configuration shipped with Fedora Core 5, where KDM passwords are cached. This allows an attacker to gain access by attempting to log in multiple times without a password, effectively bypassing authentication. The description is supported by multiple so...

CVE-2005-3742

CVE-2005-3742 describes a cross-site scripting (XSS) vulnerability in the popup.php component of Advanced Poll 2.0.3 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter. The vulnerability affects the affected Poll software as document...