78 matches found
CVE-2009-4727
CVE-2009-4727 details a SQL injection in JungleScripts Ajax Short Url Script, affecting the x/login path via the username parameter. The Vulnerability is described as allowing remote attackers to execute arbitrary SQL commands, signaling a potentially high impact. The NVD entry assigns a CVSS v2 ...
CVE-2009-4727
creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9332...
Fedora Update for lighttpd FEDORA-2007-2132
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-4727
Cross-site scripting XSS vulnerability in the contact update page ss/bwgkoemr.PUpdateEmrgContacts in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficie...
CVE-2008-4727
CVE-2008-4727 describes a Cross-site Scripting (XSS) vulnerability in SunGard Banner Student 7.3, specifically on the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) where the addr1 parameter can inject arbitrary script/HTML. The note indicates this may be related to CSRF, but the sources ...
Gentoo Security Advisory GLSA 200710-02 (php)
The remote host is missing updates announced in advisory GLSA 200710-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: lighttpd
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2006-4727
CVE-2006-4727 describes an XSS vulnerability in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly earlier versions before 6.3.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the lineId and sort parameters in emfadmin/statusView.do. Impact is that a...
Fedora 7 : lighttpd-1.4.18-1.fc7 (2007-2132)
Lighttpd 1.4.17 and earlier is prone to a header overflow when using the modfastcgi extension, this can lead to arbitrary code execution in the fastcgi application. This 1.4.18 update fixes the issue. Note that Tenable Network Security has extracted the preceding description block directly from t...
openSUSE 10 Security Update : lighttpd (lighttpd-4532)
This update fixes a buffer overflow in the fcgienvadd function. Under some circumstances this bug allows remote code execution. CVE-2007-4727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
[SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow
------------------------------------------------------------------------ Debian Security Advisory 1362-2 [email protected] http://www.debian.org/security/ Steve Kemp October 7th, 2007 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
DSquare Exploit Pack: D2SEC_LIGHTTPD3
Name| d2seclighttpd3 ---|--- CVE| CVE-2007-4727 Exploit Pack| D2ExploitPack Description| Lighttpd ModFastCGI Remote Header Overflow Exploit Notes|...
CVE-2007-4727
Buffer overflow in the fcgienvadd function in modproxybackendfastcgi.c in the modfastcgi extension in lighttpd before 1.4.18 allows remote attackers to overwrite arbitrary CGI variables and execute arbitrary code via an HTTP request with a long content length, as demonstrated by overwriting the...
CVE-2007-4727
Lighttpd is affected by CVE-2007-4727: a buffer overflow in the FastCGI extension (mod_fastcgi) through the fcgi_env_add path in mod_proxy_backend_fastcgi.c when handling overly long HTTP headers. The issue can overwrite CGI variables (notably SCRIPT_FILENAME) and may lead to remote code executio...
CVE-2005-4727
Cross-site scripting XSS vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field...
CVE-2005-4727
The CVE-2005-4727 entry describes a Cross-site scripting (XSS) vulnerability in gbook.cgi of gBook prior to 1.0.2, allowing remote attackers to inject arbitrary script/HTML via the User-Agent HTTP header. Affected component: gBook, specifically the gbook.cgi script. Underlying cause (root cause) ...
