57 matches found
Gentoo Security Advisory GLSA 201206-10 (ejabberd)
The remote host is missing updates announced in advisory GLSA 201206-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Fedora Update for ejabberd FEDORA-2011-16281
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
DEBIAN-CVE-2011-4320
The modpubsub module modpubsub.erl in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service infinite loop via a stanza with a publish tag that lacks a node attribute...
CVE-2011-4320
The modpubsub module modpubsub.erl in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service infinite loop via a stanza with a publish tag that lacks a node attribute...
CVE-2011-4320
The CVE-2011-4320 issue affects the mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3. An unauthenticated? or remote authenticated user can trigger a denial of service by sending a publish stanza without a node attribute, causing an infinite loop. The root cause is input vali...
Fedora 16 : ejabberd-2.1.9-1.fc16 (2011-16281)
Ver. 2.1.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
Fedora Update for ejabberd FEDORA-2011-16282
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2009-4320
CVE-2009-4320 describes a cross-site scripting (XSS) vulnerability in searchform.php of The Next Generation of Genealogy Sitebuilding (TNG) version 7.1.2, where an attacker can inject arbitrary script or HTML via the msg parameter. The affected component is the PHP search form handler; root cause...
CVE-2008-4320
CVE-2008-4320 concerns OpenNMS prior to 1.5.94 with multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via: (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter par...
CVE-2008-4320
Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via 1 the jusername parameter to jacegisecuritycheck, 2 the username parameter to notification/list.jsp, and 3 the filter parameter to event/list...
CVE-2008-4320
creationtimestamp| type| source ---|---|--- 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32425 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32424 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32423...
SuSE 10 Security Update : OpenOffice (ZYPP Patch Number 4320)
This update of OpenOfficeorg fixes a bug in TIFF parsing code that leads to a heap overflow. CVE-2007-2834 This bug can be exploited with user assistance to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Immunity Canvas: NCASTER_INCLUDE
Name| ncasterinclude ---|--- CVE| CVE-2007-4320 Exploit Pack| CANVAS Description| Ncaster Remote Include Notes| CVE Name: CVE-2007-4320 VENDOR: ncastercms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4320 Repeatability: Infinite CVSS: 7.5...
CVE-2007-4320
CVE-2007-4320 pertains to Ncaster 1.7.2, where a PHP remote file inclusion vulnerability exists in admin/addons/archive/archive.php. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL through the adminfolder parameter. Public references (Exploit-DB, Secunia, X-Force...
CVE-2006-4320
The CVE-2006-4320 entry describes a PHP remote file inclusion vulnerability in the OpenSEF 2.0.0 component for Joomla! via the sef.php file. The underlying issue is exploitation through a URL in the mosConfig_absolute_path parameter, allowing an attacker to execute arbitrary PHP code on the affec...
CVE-2005-4320
CVE-2005-4320 affects Limbo CMS versions 1.0.4.2 and earlier. The vulnerability allows remote attackers to obtain the installation path by requesting one of three files—doc.inc.php, element.inc.php, or node.inc.php—causing a path disclosure in an error message. OpenVAS/NASL details corroborate th...
