87 matches found
Important: Red Hat Security Advisory: mod_cluster-native security update
An update for the modcluster native component for JBoss Enterprise Web Server 1.0.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...
CVE-2010-4608
CVE-2010-4608 affects Habari 0.6.5 and enables remote information disclosure through direct requests to system/admin/header.php and system/admin/comments_items.php, with the error message revealing the installation path. Multiple connected sources corroborate the issue. No concrete remediation or...
CVE-2009-4608
CVE-2009-4608 describes a cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN web security gateway. Affected: ACCESSGUARDIAN versions 3.0.14 and earlier, and 3.5.6 and earlier. Root cause and vectors are not detailed in the provided sources beyond the XSS claim and ...
CVE-2007-4608
CVE-2007-4608 describes a PHP remote file inclusion in the logout_page parameter of protection.php within the ePersonnel RC_2004_02 package. The underlying issue enables an attacker to cause arbitrary PHP code execution by supplying a crafted URL, indicating a remote file inclusion vulnerability....
CVE-2006-4608
CVE-2006-4608 affects Longino Jacome php-Revista 1.1.2 with two XSS vulnerabilities: an injected script/HTML via the cadena parameter in busqueda.php and via the email parameter in lista.php. The description explicitly states remote attackers can inject arbitrary script, implying client-side scri...
CVE-2005-4608
CVE-2005-4608 : Affects BugPort 1.147 (index.php). The vulnerability is a SQL injection in the parameters (1) devWherePair[0], (2) orderBy, (3) where, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper handling of input parameters leading to SQL injection. Impact: d...