Fedora Update for moodle FEDORA-2015-2

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0464)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Innovaphone PBX Admin-GUI - CSRF Vulnerability

Exploit for multiple platform in category web applications Title: Innovaphone PBX Admin-GUI CSRF Impact: High CVSS2 Score: 7.8 AV:N/AC:M/Au:S/C:P/I:C/A:C/E:F/RL:U/RC:C Announced: August 21, 2014 Reporter: Rainer Giedat NSIDE ATTACK LOGIC GmbH, www.nsideattacklogic.de Products: Innovaphone PBX...

CVE-2014-5335

Multiple cross-site request forgery CSRF vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow remote attackers to hijack the authentication of administrators for requests that modify configurations or user accounts, as demonstrated by 1 changing the administrator password via a crafted...

CVE-2014-5335

CVE-2014-5335 concerns CSRF in the Innovaphone PBX Admin-GUI. The issue affects all known versions up to 10.00 sr11, where an authenticated administrator could be targeted to modify configurations or user data via forged requests without proper origin checks. Documentation provides concrete attac...

Innovaphone PBX Admin-GUI - Cross-Site Request Forgery

Innovaphone PBX Admin-GUI - Cross-Site Request Forgery Title: Innovaphone PBX Admin-GUI CSRF Impact: High CVSS2 Score: 7.8 AV:N/AC:M/Au:S/C:P/I:C/A:C/E:F/RL:U/RC:C Announced: August 21, 2014 Reporter: Rainer Giedat NSIDE ATTACK LOGIC GmbH, www.nsideattacklogic.de Products: Innovaphone PBX...

CVE-2012-5335

Summary: CVE-2012-5335 concerns a directory traversal in Tiny Server 1.1.5. Remote authenticated users could read arbitrary files by including a “..” in the HTTP request URI. The vulnerability is documented with a MEDIUM base score (CVSSv2: 4.0; AV:N/AC:L/Au:S/C:P/I:N/A:N) indicating network acce...

CVE-2012-5335

creationtimestamp| type| source ---|---|--- 2012-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18610...

CVE-2008-5335

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msgsend parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and...

CVE-2008-5335

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msgsend parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and...

CVE-2008-5335

CVE-2008-5335 describes an SQL injection in PHP-Fusion before remediation: in messages.php, versions 6.01.15 and 7.00.1 allow remote attackers to inject SQL via the subject and msg_send parameters when magic_quotes_gpc is disabled. The root cause is improper handling of user input in these fields...

CVE-2008-5335

creationtimestamp| type| source ---|---|--- 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7173...

Gentoo Security Advisory GLSA 200711-14 (firefox seamonkey xulrunner)

The remote host is missing updates announced in advisory GLSA 200711-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200711-14 (firefox seamonkey xulrunner)

The remote host is missing updates announced in advisory GLSA 200711-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5335

CVE-2007-5335 affects Mozilla Firefox 2.0 prior to 2.0.0.8. According to the description, a remote attacker could obtain sensitive information by abusing the addMicrosummaryGenerator sidebar method to access file: URIs. The CVSS base score is 4.3 (Medium) with network access and no authentication...