CVE-2010-3921

Summary of CVE-2010-3921 (Movable Type XSS) Affected product family: Movable Type (Six Apart). The vulnerability is a cross-site scripting (XSS) issue reported for Movable Type 4.x before 4.35 and 5.x before 5.04, allowing remote attackers to inject arbitrary script or HTML in the victim’s browse...

CVE-2010-3921

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3921

The CVE-2009-3921 issue affects the Drupal Smartqueue_og module. It does not verify group-node privileges during subqueue creation, enabling remote authenticated users to reveal arbitrary organic group names by reading confirmation messages. Affected versions are Drupal Smartqueue_og 5.x before 5...

Debian Security Advisory DSA 1402-1 (gforge)

The remote host is missing an update to gforge announced via advisory DSA 1402-1. OpenVAS Vulnerability Test $Id: deb14021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1402-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-3921

CVE-2007-3921 affects gforge (Debian packages gforge 3.1 and 4.5.14) where insecure handling of temporary files enables local users to truncate arbitrary files via a symlink attack. The Debian security advisory DSA-1402-1 documents the vulnerability and fixes, with updated packages for etch (4.5....

[SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1402-1 [email protected] http://www.debian.org/security/ Steve Kemp November 07, 2007 http://www.debian.org/security/faq -...

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

CVE-2006-3921

Summary (CVE-2006-3921): Affects Sun Java System Application Server (SJSAS) 7–8.1 and Web Server (SJSWS) 6.0–6.1. The issue permits remote authenticated users to read files outside the “document root” via a direct request using a UTF-8 encoded URI. The NVD entry lists a Medium base score (AV:N/AC...