CVE-2015-5608

Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1...

CVE-2015-5608

Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1...

CVE-2015-5608

CVE-2015-5608 affects Joomla! CMS 3.0.0 through 3.4.1 and is an open redirect vulnerability. The issue stems from inadequate validation of script parameters/return value, enabling redirection to an arbitrary external site when a user follows a crafted link. Exploitation details aren’t provided in...

CVE-2017-5608

Cross-site scripting XSS vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename...

CVE-2017-5608

Cross-site scripting XSS vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename...

CVE-2017-5608

Piwigo

openSUSE Security Update : virtualbox (openSUSE-2017-141)

This update for virtualbox fixes the following issues : - The version has been updated from 5.1.8 to 5.1.12. Upstream fixed various functional and security issues. - Multiple security issues have been fixed that could cause DoS and possibly privilege escalation...

CVE-2016-5608

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613...

CVE-2016-5608

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613...

CVE-2016-5608

CVE-2016-5608 affects Oracle VM VirtualBox components prior to 5.0.28 and prior to 5.1.8 in the 5.1.x line. The vulnerability is described as an unspecified local-privilege/availability issue (Vector: Core) that could allow local users to affect availability. It is explicitly linked to a differen...

KLA10888 Multiple vulnerabilities in Oracle VM VirtualBox

Multiple serious vulnerabilities have been found in Oracle VM VirtualBox. Malicious users can exploit these vulnerabilities to cause denial of service, affect integrity or obtain sensitive information. These vulnerabilities can be executed remotely and related to Core, OpenSSL and VRDE. Original...

coursehero.com XSS vulnerability

Vulnerable URL: https://www.coursehero.com/search/results/ Details: Description| Value ---|--- Patched:| Yes, at 01.11.2015 Latest check for patch:| 01.11.2015 20:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5608 Google Pagerank| 6 VIP website status:| Yes...

Joomla! 3.x < 3.4.2 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is 3.x prior to 3.4.2. It is, therefore, affected by multiple vulnerabilities : - A cross-site request forgery XSRF vulnerability exists due to a failure to require explicit confirmation or a...

CVE-2014-5608

The CVE-2014-5608 entry applies to the Android app Line Runner (Free) (com.djinnworks.linerunnerfree) version 4. The vulnerability is due to the app not verifying X.509 certificates when connecting to SSL servers, enabling a man-in-the-middle to spoof servers and access sensitive data via a craft...

CVE-2012-5608

CVE-2012-5608 describes a cross-site scripting (XSS) vulnerability in ownCloud’s web authentication module. The issue arises in the file path apps/user_webdavauth/settings.php for ownCloud versions 4.5.x prior to 4.5.2, allowing remote attackers to inject arbitrary web script or HTML via arbitrar...

Fedora Core 9 FEDORA-2009-5608 (acpid)

The remote host is missing an update to acpid announced via advisory FEDORA-2009-5608. OpenVAS Vulnerability Test $Id: fcore20095608.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5608 acpid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

HP Instant Support HPISDataManager.dll ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 29530 CVECAN ID: CVE-2007-5608 HP Instant Support是是基于网络的故障诊断和排除工具套件，适用于桌面计算和打印产品。 HP Instant Support所安装的HPISDataManager.dll ActiveX控件没有正确地过滤对DownloadFile函数的输入参数。如果用户受骗访问了恶意网页并向该函数传送了超长参数的话，就可能导致向本地系统下载任意文件。 HP Instant Support 1.0.0.22 临时解决方法：...

Hardcoded credentials

The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a differe...

CVE-2007-5608

HP Instant Support HPISDataManager.dll ActiveX control contains the DownloadFile() function vulnerability (CVE-2007-5608). An unauthenticated remote attacker could force the ActiveX to download arbitrary files to a location on the victim’s system via a crafted URL and destination filename. Affect...

CVE-2006-5608

SQL injection vulnerability in Extended Tracker xtracker 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."...