CVE-2008-4325

lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP request for the Content-Type header in the HTTP response, which allows remote attackers to cause content to be misinterpreted by the browser via a content-type parameter that is inconsistent with the requested object. NOTE:...

CVE-2008-4325

Removed by vendor...

CVE-2008-4325

CVE-2008-4325 affects ViewVC 1.0.5 (lib/viewvc.py) where the Content-Type header in the HTTP response is derived from the request’s content-type parameter, allowing a mismatch that could cause browsers to misinterpret content. The issue is contingent on attacker access to the viewed repository. P...

Fedora 8 : viewvc-1.0.6-1.fc8 (2008-8270)

Security fix: ignore arbitrary user-provided MIME types ViewVC issue 354: http://viewvc.tigris.org/issues/showbug.cgi?id=354 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

Fedora 9 : viewvc-1.0.6-1.fc9 (2008-8252)

Security fix: ignore arbitrary user-provided MIME types ViewVC issue 354: http://viewvc.tigris.org/issues/showbug.cgi?id=354 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

CVE-2007-4325

Gaestebuch 1.5 is affected by a PHP remote file inclusion in index.php triggered by a URL in the config[root_ordner] parameter. The underlying issue is that a user-supplied path is used in a context that allows inclusion of arbitrary PHP code, enabling remote code execution. The vulnerability aff...

CVE-2006-4325

Cross-site scripting XSS vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4325

The CVE refers to Doika guestbook (version 2.5, possibly earlier) with a reflected XSS in gbook.php via the page parameter. This allows remote attackers to inject arbitrary scripts/HTML. No patch/remediation details are provided in the supplied documents; exploitation status and exact fixes are n...

CVE-2005-4325

Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to 1 a "ptrace exploit" and 2 "some other potential security problems."...

CVE-2005-4325

CVE-2005-4325 relates to Driverse prior to version 0.56b. The connected sources indicate two issues: (1) a ptrace-based exploit and (2) other potential security problems. The documents describe unknown impact and attack vectors, with no explicit root-cause analysis, affected subcomponents, CVSS m...