91 matches found
[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
------------------------------------------------------------------------ Debian Security Advisory DSA-1675-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 30, 2008 http://www.debian.org/security/faq -...
CVE-2008-4326
The PMAescapeJsString function in libraries/jsescape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via a NUL byte inside a "/script" sequence...
CVE-2008-4326
The PMAescapeJsString function in libraries/jsescape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via a NUL byte inside a "/script" sequence...
DEBIAN-CVE-2008-4326
The PMAescapeJsString function in libraries/jsescape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via a NUL byte inside a "/script" sequence...
CVE-2008-4326
The PMAescapeJsString function in libraries/jsescape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via a NUL byte inside a "/script" sequence...
CVE-2008-4326
The CVE-2008-4326 vulnerability affects phpMyAdmin prior to 2.11.9.2 and arises from the PMA_escapeJsString function in libraries/js_escape.lib.php. When used with Internet Explorer, this allows remote XSS via a NUL byte inside a sequence, bypassing XSS protections. Public references in Debian/O...
FreeBSD Ports: phpMyAdmin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Linux Kernel ULE包处理远程拒绝服务漏洞
Linux kernel是一款开放源代码的操作系统。 Linux kernel的ULE解封装代码存在缺陷，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 攻击者发送畸形的使用SNDU长度为0的ULEUnidirectional Lightweight Encapsulation RFC 4326包，可导致机器停止响应，造成拒绝服务攻击。 Linux kernel 2.6.17 .8 可采用如下补丁： --- diff -uprN linux-2.6.17.8/drivers/media/dvb/dvb-core/dvbnet.c...
CVE-2006-4326
A stack-based buffer overflow vulnerability exists in Justsystem Ichitaro (versions 9.x through 13.x, 2004, 2005, 2006, and Government 2006), Ichitaro for Linux , and FormLiner (before 20060818). The root cause is the improper handling of long Unicode strings within a crafted document , which all...
CVE-2005-4326
The CVE-2005-4326 entry concerns APC PowerChute Network Shutdown’s web interface, where all communication is performed in cleartext (base64-encoded). This design allows remote attackers to sniff authentication credentials. Public references confirm the issue and the metric suggests a network-base...
