192 matches found
Fedora 10 : roundcubemail-0.2.2-4.fc10 (2009-12481)
Fixes for CVE-2009-4076 and CVE-2009-4077. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
CVE-2009-4076
Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076...
CVE-2009-4076
Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...
CVE-2009-4076
Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...
CVE-2009-4076
Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...
CVE-2009-4076
Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...
CVE-2008-4076
CVE-2008-4076 is an XSS vulnerability affecting multiple Tor World CGI-based products (Tor Board 1.3 and earlier; Topics BBS 1.11 and earlier; Simple BBS 1.86 and earlier; Interactive BBS 1.57 and earlier). Public sources describe an ability for remote attackers to inject arbitrary script/HTML in...
CVE-2007-4076
CVE-2007-4076 describes multiple SQL injection vulnerabilities in index.asp of the Alisveris Sitesi Scripti. The issue allows remote attackers to execute arbitrary SQL commands through the (1) product_id or (2) cat_id parameters in a product mod action. The NVD entry notes the provenance is from ...
CVE-2005-4076
The CVE-2005-4076 entry concerns Appfluent Technology Database IDS 2.0. A buffer overflow can be triggered by a long APPFLUENT_HOME environment variable, allowing local users to execute arbitrary code. The vulnerability is local in scope with partial confidentiality, integrity, and availability i...
