88 matches found
Fedora Core 11 FEDORA-2009-12827 (rt3)
The remote host is missing an update to rt3 announced via advisory FEDORA-2009-12827. OpenVAS Vulnerability Test $Id: fcore200912827.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12827 rt3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
CVE-2009-4151
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages "HTTP access to the RT server," a relate...
CVE-2009-4151
CVE-2009-4151 describes a session fixation vulnerability in Best Practical Solutions RT, affecting RT 3.0.0–3.6.9 and RT 3.8.x up to 3.8.5. The issue arises in the SetupSessionCookie path where an attacker can influence the session identifier via HTTP access to the RT server, enabling potential s...
CVE-2010-4151
creationtimestamp| type| source ---|---|--- 2009-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8240...
CVE-2008-4151
Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. dot dot in the neturl parameter...
CVE-2008-4151
CVE-2008-4151 : Directory traversal in collect.php of CYASK 3.x allows remote attackers to read arbitrary files via a .. in the neturl parameter. Impact: read access to files. The provided documents do not include remediation details or patch/version information. Exploitation status is not specif...
CVE-2008-4151
creationtimestamp| type| source ---|---|--- 2008-09-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6487...
CVE-2007-4151
The CVE-2007-4151 issue affects Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0. It enables remote information disclosure via (1) LOG.ON (reveals the logging pathname), (2) VER (reveals the server version in responses), and (3) the banner in an initial connection. CVSSv2 b...