Fedora Update for drupal7-webform FEDORA-2015-5055

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5055

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of logi...

CVE-2012-5055

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of logi...

CVE-2012-5055

CVE-2012-5055 affects VMware SpringSource Spring Security: DaoAuthenticationProvider does not compare the password when the username is not found, causing a shorter response delay that could enable remote attackers to enumerate valid usernames via login requests. Affected versions include Spring ...

CVE-2011-5055

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit set. NOTE:...

CVE-2011-5055

The provided documents confirm a concrete vulnerability in MaraDNS: hash collision handling bugs allow a remote attacker to exhaust CPU by sending numerous crafted DNS queries with the RD bit set, affecting MaraDNS 1.3.07.12 and 1.4.08 (and older releases affected by related CVE-2012-0024). Root ...

CVE-2010-5055

SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5055

CVE-2010-5055 documents an SQL injection in the Almnzm 2.1 application. The vulnerability is triggered in the index.php when processing the id parameter, allowing an attacker to manipulate the underlying SQL query. The available sources do not specify affected versions beyond 2.1 or any concrete ...

CVE-2009-5055

Open Ticket Request System OTRS before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the...

CVE-2009-5055

Open Ticket Request System (OTRS) prior to 2.4.4 has a transport-layer access-control flaw: ticket access is granted based on single-digit substrings of the CustomerID, enabling remote authenticated users to bypass restrictions and read tickets intended for other CustomerIDs (e.g., CustomerID 12 ...

CVE-2010-5055

creationtimestamp| type| source ---|---|--- 2010-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12220...

CVE-2008-5055

SQL injection vulnerability in departmentofflinecontext.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the departmentid parameter to index.php...

CVE-2007-5055

CVE-2007-5055 affects iziContents 1 RC6 and earlier. The vulnerability is a directory traversal that allows remote attackers to include and execute arbitrary local files via a .. in the admin_home parameter to modules/poll/poll_summary.php or the rootdp parameter to include/db.php. Connected reco...

CVE-2006-5055

CVE-2006-5055 describes a PHP remote file inclusion in syntaxCMS 1.1.1 to 1.3, exploitable via a URL in the init_path parameter of admin/testing/tests/0004_init_urls.php. The underlying issue is a vulnerability in how user-supplied URLs are included, allowing remote attackers to execute arbitrary...