73 matches found
CVE-2009-4524
Cross-site scripting XSS vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a realname aka real name element...
CVE-2009-4524
CVE-2009-4524 affects the Drupal RealName module (6.x-1.x) prior to 6.x-1.3. It is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the realname element. The entry lists a MEDIUM impact with a base score of 4.3 (NVD), but exploitat...
CVE-2009-4524
Cross-site scripting XSS vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a realname aka real name element...
CVE-2006-4524
creationtimestamp| type| source ---|---|--- 2009-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10496...
CVE-2008-4524
SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-4524
creationtimestamp| type| source ---|---|--- 2008-10-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6662...
Debian Security Advisory DSA 944-1 (mantis)
The remote host is missing an update to mantis announced via advisory DSA 944-1. Several security related problems have been discovered in Mantis, a web-based bug tracking system. For details on the issues resolved, please visit the referenced advisories. The old stable distribution woody does no...
CVE-2006-4524
CVE-2006-4524 affects Digiappz Freekot 1.01, where multiple SQL injection flaws exist in login_verif.asp. The vulnerability enables remote attackers to inject SQL commands through the login or password parameters, potentially compromising data and the application. The issue is documented with a h...
[SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 944-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2006 http://www.debian.org/security/faq -...
CVE-2005-4524
Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak...
CVE-2005-4524
CVE-2005-4524 affects Mantis 1.0.0rc3 and covers improper handling of the "Make note private" action during bug resolution, with unknown impact and potential information leakage. Public sources (Debian DSA-944-1, Ubuntu CVE page, NVD) corroborate the issue as one of several Mantis vulnerabilities...