Fedora Update for phpMyAdmin FEDORA-2011-15846

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-15846 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora 14 : phpMyAdmin-3.4.7.1-1.fc14 (2011-15831)

Changes for 3.4.7.1 2011-11-10 : - security Fixed possible local file inclusion in XML import CVE-2011-4107 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

Fedora 16 : phpMyAdmin-3.4.7.1-1.fc16 (2011-15841)

Changes for 3.4.7.1 2011-11-10 : - security Fixed possible local file inclusion in XML import CVE-2011-4107 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

CVE-2011-4107

The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...

CVE-2011-4107

CVE-2011-4107 affects phpMyAdmin 3.3.x (before 3.3.10.5) and 3.4.x (before 3.4.7.1). The vulnerability resides in the XML import plug‑in (libraries/import/xml.php) where simplexml_load_string can process XML data containing external entity references, enabling a remote authenticated user to read ...

Local file inclusion.

PMASA-2011-17 Announcement-ID: PMASA-2011-17 Date: 2011-11-10 Summary Local file inclusion. Description Importing a specially-crafted XML file which contains an XML entity injection permits to retrieve a local file limited by the privileges of the user running the web server. Severity We consider...

SuSE 11.1 Security Update : gimp (SAT Patch Number 4107)

Several gimp plugins were prone to buffer overflows. CVE-2010-4540 / CVE-2010-4541 / CVE-2010-4542 / CVE-2010-4543 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrig...

HP LaserJet printer PJL interface directory traversal vulnerability-vulnerability warning-the black bar safety net

HP LaserJet is HP printer, comprising a plurality of models. HP LaserJet to the MFP device in the PJL file system access interface there is a directory traversal vulnerability that could lead to sensitive information disclosure and is likely to be modified. This includes the background processing...

n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...

CVE-2010-4107

creationtimestamp| type| source ---|---|--- 2010-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15631...

CVE-2010-4107

CVE-2010-4107 affects HP LaserJet MFPs and select LaserJet models (e.g., 4100/4200/4300/5100/8150/9000) where the PJL File System External Access is misconfigured by default. The issue allows an attacker to read arbitrary files on the device by sending PJL directory traversal via a print job, lev...

CVE-2009-4107

CVE-2009-4107 affects Invisible Browsing 5.0.52. The vulnerability is a buffer overflow in processing a crafted .ibkey file containing a long string, enabling user‑assisted remote code execution. Impact per sources is complete confidentiality, integrity, and availability compromise. The documente...

Fedora Update for wordpress FEDORA-2008-7760

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

Sql injection

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

CVE-2008-4107

CVE-2008-4107 (and related CVEs CVE-2008-2107/2108) involves PHP 5.2.x generating non-cryptographically strong random numbers due to flaws in rand/mt_rand seeding. The Initial Description notes this weakness affected security‑relevant functionality (password reset in Joomla! 1.5.x and WordPress p...

CVE-2008-4106

WordPress prior to 2.6.2 is affected by CVE-2008-4106: improper handling of MySQL warnings about username length and trailing spaces in username comparison can allow a remote attacker to change another user’s password by registering a similar username and requesting a password reset. This is tied...

Fedora 9 : wordpress-2.6.2-1.fc9 (2008-7902)

http://wordpress.org/development/2008/09/wordpress-262/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2007-4107

CVE-2007-4107 describes an SQL injection in editpost.php of phpMyForum prior to 4.1.4, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: phpMyForum (before 4.1.4). The underlying cause is an injection vulnerability in the editpost path. Report...

CVE-2006-4107

CVE-2006-4107 describes an SQL injection vulnerability in Drupal’s Job Search module (job.module) for version 4.6 prior to revision 1.3.2.1. The vulnerability allows remote attackers to craft a job or resume search that could cause arbitrary SQL execution. The core issue is an injectable input ha...