Debian DSA-2139-1 : phpmyadmin - several vulnerabilities

Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-4329 Cross site scripting was possible in search, that allowed a remote attacker to inject arbitrary...

Fedora Update for phpMyAdmin FEDORA-2010-18343

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2010-18343 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for phpMyAdmin FEDORA-2010-18343

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for phpmyadmin MDVSA-2010:244 (phpmyadmin)

Check for the Version of phpmyadmin OpenVAS Vulnerability Test Mandriva Update for phpmyadmin MDVSA-2010:244 phpmyadmin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Fedora 13 : phpMyAdmin-3.3.8.1-1.fc13 (2010-18371)

Changes for 3.3.8.1 2010-11-29 - security XSS on db search, see PMASA-2010-8 - http://www.phpmyadmin.net/homepage/security/PMASA-201 0-8.php - CVE-2010-4329 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2010-4329

Technical details beyond the CVE ID and brief descriptions are not provided in the connected documents. Monitor for updates or advisories for concrete affected versions, impact, and fixes.

XSS attack in database search.

PMASA-2010-8 Announcement-ID: PMASA-2010-8 Date: 2010-11-29 Summary XSS attack in database search. Description It was possible to conduct a XSS attack using spoofed request on the db search script. Severity We consider this vulnerability to be non critical. Affected Versions For 3.x: versions...

CVE-2009-4329

CVE-2009-4329 affects IBM DB2 9.5 before FP5, specifically the Engine Utilities component. Remote authenticated users can cause a denial of service (segmentation fault) by modifying the db2ra data stream in a request from the Load Utility. Connected sources from Red Hat and NVD echo the same desc...

Remote file inclusion

PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oeclasspath parameter, a different vector than CVE-2008-4329...

CVE-2008-4329

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oeclasspath parameter...

CVE-2008-4329

CVE-2008-4329 describes a PHP remote file inclusion in openEngine 2.0 beta4 and earlier. The vulnerability resides in cms/system/openengine.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the oe_classpath parameter. Affected software is openEngine 2.0 beta4 and earl...

CVE-2007-4329

CVE-2007-4329 concerns Web News 1.1, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code by passing a URL in the config[root_ordner] parameter to one of three scripts: index.php, news.php, or feed.php. The source of the flaw is a lack of proper...

CVE-2006-4329

Multiple PHP remote file inclusion vulnerabilities affect Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier. The flaw allows an attacker to supply a URL via CONFIG[gameroot] that targets one of four include paths (core/includes/security.inc.php, core/includes/smarty.inc.php, qcms/includes/smarty....

CVE-2005-4329

CVE-2005-4329 affects PHP Arena paFileDB Extreme Edition RC 5 and earlier . The vulnerability is a SQL injection in the file pafiledb.php , allowing remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameters. The initial details show a network attack vector with a...