75 matches found
Fedora Update for php FEDORA-2013-23208
Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2013-23208 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for php FEDORA-2013-23208
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: php54
Issue Overview: Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID. The opensslx509parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly...
BELL-CVE-2011-4718 CVE-2011-4718 does not affect BellSoft software
Bulletin has no description...
CVE-2011-4718
CVE-2011-4718 refers to a session fixation vulnerability in PHP’s Sessions subsystem, affecting PHP versions prior to 5.5.2. An attacker can hijack a user’s web session by specifying a session ID, potentially impacting confidentiality and integrity of sessions. Public details explicitly state the...
CVE-2010-4718
Multiple cross-site scripting XSS vulnerabilities in the Lyftenbloggie comlyftenbloggie component 1.1.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 tag and 2 category parameters to index.php...
CVE-2010-4718
The provided documents confirm CVE-2010-4718 affects the Joomla! component Lyftenbloggie (com_lyftenbloggie) version 1.1.0. It lists multiple cross-site scripting (XSS) vulnerabilities exploitable by supplying arbitrary web script or HTML through the index.php parameters (1) tag and (2) category....
CVE-2009-4718
CVE-2009-4718 affects Gonafish WebStatCaffe: SQL injection in visitorduration.php via the nodayshow parameter. This allows remote attackers to execute arbitrary SQL commands. Severity is high (CVSS v2 base 7.5). No remediation details are provided in the connected documents; exploitation status a...
CVE-2008-4718
CVE-2008-4718 affects X7 Chat 2.0.1 A1 and earlier. A directory traversal vulnerability in help/mini.php allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the help_file parameter. Root cause is unsanitized input used in a file include. No re...
CVE-2007-4718
Claroline is affected by a Directory Traversal (CVE-2007-4718) in inc/lib/language.lib.php where the language parameter is unsafely used to include files. Versions before 1.8.6 are vulnerable to Local File Inclusion, allowing remote attackers to view arbitrary files or execute PHP code on the ser...
CVE-2006-4718
CVE-2006-4718 affects KorviBlog 1.3.0, where XSS flaws exist in livre_or.php allowing remote injection of arbitrary script/HTML via parameters prenom, emailFrom, or body. The NVD entry documents multiple XSS vulnerabilities with impact on confidentiality, integrity, and availability (partial impa...
CVE-2005-4718
CVE-2005-4718 affects Opera 8.02 and earlier. The issue allows remote denial of service (client crash) via two vectors: (1) a crafted HTML file containing a content: url(0); style attribute, a bodyA tag, a long string, and a long attribute on a u tag (oper a.html demonstrated); and (2) a BGSOUND ...
MS:673973E9-6509-4718-A93F-63AE941263D4
...