50 matches found
Debian Security Advisory DSA 2756-1 (wireshark - several vulnerabilities)
Multiple vulnerabilities were discovered in the dissectors for LDAP, RTPS and NBAP and in the Netmon file parser, which could result in denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2756.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from...
xeams email server 4.4 build 5720 - Persistent Cross-Site Scripting
xeams email server 4.4 build 5720 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Xeams Email Server Version: 4.4 Build 5720 Vendor Site: http://www.xeams.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...
CVE-2008-5720
Summary: CVE-2008-5720 describes a cross-site scripting (XSS) vulnerability in Mayaa, an open-source Java template engine, triggered by the default error page and related exceptions (e.g., PageNotFoundException). The issue affects Mayaa up to version 1.1.22 (and 1.1.23 is referenced as the fixed ...
openSUSE 10 Security Update : lynx (lynx-5720)
This update of lynx fixes a security bug that can be exploited by remote attackers to execute arbitrary commands when advanced mode is enabled and lynx is used as URL handler CVE-2008-4690 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
CVE-2007-5720
CVE-2007-5720 : Affected product: ProfileCMS 1.0. The vulnerability is an unrestricted file upload in the profiles script that allows remote attackers to upload and execute arbitrary PHP code via profile creation. The NVD entry lists a CVSS v2 base score of 6.8 (NETWORK, MEDIUM) with partial impa...
Microsoft Malware Protection Engine Crafted PDF Code Execution (MS07-010; CVE-2006-5720)
Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A remote code execution vulnerability has been reported in Microsoft Malware Protection Engine. ...
CVE-2006-5720
SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter...
CVE-2006-5720
SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter...
CVE-2006-5720
CVE-2006-5720 describes a remote SQL injection in the PHP-Nuke Journal module (files: modules/journal/search.php) where the parameter forwhat can be tainted to inject arbitrary SQL. Affected software: PHP-Nuke 7.9 and earlier. Root cause: improper input handling in the journal search feature lead...
