94 matches found
Fedora 8 : mediawiki-1.13.3-41.99.fc8 (2008-11688)
This is a security release of MediaWiki 1.13.3. Some of the security issues affect all versions of MediaWiki except the versions released on Dec. 15th, so all site administrators are encouraged to upgrade. CVEs assigned to the mentioned MediaWiki update: CVE-2008-5249 Cross-site scripting XSS...
CVE-2008-5250
Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...
CVE-2008-5250
Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...
CVE-2008-5250
The CVE-2008-5250 issue affects MediaWiki prior to 1.6.11, 1.12.x prior to 1.12.2, and 1.13.x prior to 1.13.3. It is a cross-site scripting (XSS) vulnerability that can be exploited by remote authenticated users who edit a wiki page when using Internet Explorer with uploads enabled, or with an SV...
CVE-2008-5250
Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...
CVE-2007-5250
The CVE-2007-5250 entry concerns the Windows dedicated server for the Unreal engine used by America’s Army (and AA Special Forces 2.8.2 and earlier). The vulnerability allows remote attackers to cause a denial of service (server hang) by sending packets containing 0x07 characters or other unspeci...
CVE-2006-5250
PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6public and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APPpathlib parameter, a different vector than CVE-2006-2864...
CVE-2006-5250
CVE-2006-5250 affects BlueShoes 4.6_public and earlier. The PHP remote file inclusion vulnerability exists in lib/googlesearch/GoogleSearch.php, where an attacker can supply a URL via the APP[path][lib] parameter to cause the script to include and execute PHP code on the remote host. Root cause i...
CVE-2006-5250
PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6public and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APPpathlib parameter, a different vector than CVE-2006-2864...
[VulnWatch] iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability
Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability iDefense Security Advisory 01.23.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376 January 23, 2006 I. BACKGROUND iTechnology is an integration technology which provides standard...
CVE-2005-0868
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...
CVE-2005-0868: Undefined Security Weakness
AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...