85 matches found
openSUSE Security Update : otrs (openSUSE-SU-2013:1338-1)
The ticket system OTRS was updated to 3.1.18 to fix various bugs and security issues. Update to 3.1.18 : - OSA-2013-05, CVE-2013-4717, CVE-2013-4718 fixed. - Fixed bug9561 - ACL restriction with CustomerID for DynamicFields at new Ticket screen not working. - Fixed bug9425 - Wrong created date fo...
Mandriva Linux Security Advisory : otrs (MDVSA-2013:212)
Updated otrs package fixes security vulnerability : It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise user-supplied data that is used on SQL queries. An attacker with a valid agent login could exploit this issue to craft SQL queries by injecting arbitrary SQ...
Updated otrs package fixes security vulnerability
It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise user-supplied data that is used on SQL queries. An attacker with a valid agent login could exploit this issue to craft SQL queries by injecting arbitrary SQL code through manipulated URLs CVE-2013-4717...
Debian DSA-2733-1 : otrs2 - SQL injection
It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise user-supplied data that is used on SQL queries. An attacker with a valid agent login could exploit this issue to craft SQL queries by injecting arbitrary SQL code through manipulated URLs. %NASLMINLEVEL 70300...
[SECURITY] [DSA 2733-1] otrs2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2733-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 02, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2733-1] otrs2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2733-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 02, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2733-1 (otrs2 - SQL injection)
It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise user-supplied data that is used on SQL queries. An attacker with a valid agent login could exploit this issue to craft SQL queries by injecting arbitrary SQL code through manipulated URLs. OpenVAS Vulnerabili...
CVE-2011-4717
The CVE-2011-4717 issue affects zFTPServer Suite 6.0.0.52 and is a Directory Traversal vulnerability triggered by a crafted RMD (rmdir) command, allowing remote authenticated users to delete arbitrary directories. The exploitation is demonstrated by a PoC in Perl, and multiple sources (Red Hat, N...
zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal
Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Advisory ID: INFOSERVE-ADV2011-09 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID:...
zFTPServer Suite 6.0.0.52 Directory Traversal
Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Advisory ID: INFOSERVE-ADV2011-09 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID:...
zFTPServer Suite 6.0.0.52 - 'rmdir' Directory Traversal
!/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID: CVE-2011-4717 PoC-Version: 0....
zFTPServer Suite 6.0.0.52 - rmdir Directory Traversal
zFTPServer Suite 6.0.0.52 - rmdir Directory Traversal !/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vend...
zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal
Exploit for windows platform in category remote exploits !/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: email protected Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor...
CVE-2010-4717
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long 1 LIST or 2 LSUB command...
CVE-2010-4717
CVE-2010-4717 : Multiple stack-based buffer overflows in the IMAP server component of GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote code execution via long LIST or LSUB commands. Affected product/versions are GWIA prior to 8.02HP; root cause is stack-based overflo...
CVE-2010-4717
creationtimestamp| type| source ---|---|--- 2010-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15464...
CVE-2009-4717
CVE-2009-4717 affects Gonafish WebStatCaffe. The issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via parameters in stat/: host.php (host), mostvisitpage.php and visitorduration.php (nodayshow), stat/mostvisitpagechart...
CVE-2009-4717
creationtimestamp| type| source ---|---|--- 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34674 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34675 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34677 2009-08-29...
CVE-2008-4717
CVE-2008-4717 concerns a SQL injection in the bannerclick.php script of ZEELYRICS 2.0, exploitable via the adid parameter. The affected component is bannerclick.php within ZEELYRICS 2.0; root cause is improper handling of user-supplied input leading to arbitrary SQL execution. The NVD entry assig...