99 matches found
phpMyAdmin XSS Vulnerability (PMASA-2014-1) - Windows
phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
phpMyAdmin XSS Vulnerability (PMASA-2014-1) - Linux
phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora 21 : kernel-4.1.7-100.fc21 (2015-15933)
The 4.1.7 update contains a number of important updates across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
TORQUE Resource Manager: Multiple vulnerabilities
Background TORQUE is a resource manager and queuing system based on OpenPBS. Description Multiple vulnerabilities have been discovered in TORQUE Resource Manager. Please review the CVE identifiers referenced below for details. Impact A context-dependent attacker may be able to gain escalated...
Server side request forgery (ssrf)
The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8 through 4.1.7 allows remote attackers to conduct PHP object injection and Server-Side Request Forgery SSRF attacks via crafted serialized data in the report parameter...
Joomla Youtube Gallery 4.1.7 SQL Injection
Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh [email protected] Vendor Homepage: http://www.joomlaboat.com/youtube-gallery Software Link:...
Apple Open Firmware 4.1.7/4.1.8 Insecure Password Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3186/info A user who has set an Open Firmware password on their Apple system believes it to be safe when powered down. There is a tool that any user with access to the Finder can run in order to reveal the Open Firmware...
[ MDVSA-2014:046 ] phpmyadmin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:046 http://www.mandriva.com/en/support/security/ Package : phpmyadmin Date : February 21, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discovered an...
DEBIAN-CVE-2014-1879
Cross-site scripting XSS vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action...
TYPO3 File Upload and XSS Vulnerabilities (TYPO3-20080611-1)
TYPO3 is prone to file upload and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
vBulletin 4.1.7 => 4.1.10 XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: vBulletin 4.1.7 = 4.1.10 XSS Vulnerability Google Dork: intitle: powered by vBulletin 4.1.10 Date: 20/02/2012 Author: .e0f Software Link: http://www.vbulletin.com/ Version: 4.1.10 Others not tested Tested on: BackTrack 5 |...
vBulletin 4.1.7 - Multiple Remote File Inclusions
vBulletin 4.1.7 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/50455/info vBulletin is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially...
vBulletin 4.1.7 Beta 1 Remote File Inclusion
==================================================== vBulletin® Version 4.1.7 Beta 1 Mullti Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0...
CVE-2009-0256
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to 1 frontend and 2 backend authentication...
Debian Security Advisory DSA 1596-1 (typo3)
The remote host is missing an update to typo3 announced via advisory DSA 1596-1. OpenVAS Vulnerability Test $Id: deb15961.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1596-1 typo3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Rosoft Media Player <= 4.1.7 .M3U Stack Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== Rosoft Media Player include / Invalid chars: 0x1A 0xA 0xD 0x00 win32bind - EXITFUNC=thread LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char uszShellcode ...
MySQL安全调用特权提升漏洞
MySQL是一款开放源代码的数据库程序。 MySQL在部分函数过程中不正确恢复访问特权，远程攻击者可以利用漏洞提升权限，进行其他攻击。 目前没有详细漏洞细节提供。 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1...
JVN#87830692 WebNote Clip vulnerable to OS command injection
Impact An attacker could execute an arbitrary OS command on the server with WebNote Clip installed. Solution Products Affected WebNote Clip 4.1.7 and earlier...
