[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

Stored XSS in "activity" application - ownCloud

Due to not sanitising all user provided input, the "activity" application shipped with the mentioned ownCloud versions is vulnerable to stored cross-site scripting attacks. The "activity" application is enabled by default in the ownCloud Community Edition and Enterprise Edition. Successful...

CVE-2014-5953

The CVE-2014-5953 entry concerns the KASKUS Android app (com.kaskus.android) version 2.13.0. The vulnerability is an SSL/TLS validation flaw where the app does not verify X.509 certificates from servers, enabling man-in-the-middle attackers to spoof servers and capture sensitive information via a...

CVE-2013-5953

Multiple cross-site scripting XSS vulnerabilities in tmpl/layouteditevent.php in the Multi Calendar commulticalendar component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 calid or 2 paletteDefault parameter in an...

CVE-2013-5953

CVE-2013-5953 affects the Joomla! Multi Calendar component (com_multicalendar) 4.0.2 and possibly earlier versions (e.g., 4.8.5), with multiple XSS vulnerabilities in tmpl/layout_editevent.php. The root cause is inadequate sanitization of GET parameters calid and paletteDefault when task editeven...

Joomla! Multi Calendar组件跨站脚本漏洞

CVE ID：CVE-2013-5953 Joomla!是一款内容管理系统。 由于通过"calid"和"paletteDefault" GET参数传递到index.php 当"option"设置为"commulticalendar"和"task"设置为"editevent"的输入在返回用户前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 Multi Calendar 4.x component for Joomla 目前没有详细解决方案提供： http://www.joomla.org...

CVE-2012-5953

The CVE-2012-5953 entry concerns IBM WebSphere Message Broker: affected versions are 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, where enabling the Parse Query Strings option on an HTTPInput node allows a remote attacker to cause a denial of service (infinite loop) via a craf...

Hulu Access Detection

Binary data 5953.prm...

CVE-2008-5953

Directory traversal vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to the default URI...

CVE-2008-5953

CVE-2008-5953 is a directory traversal vulnerability affecting the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, a remote attacker can include and execute arbitrary local files by supplying a .. (dot dot) path in the p parameter of the default URI. This leads to ...

CVE-2006-5953

SQL injection vulnerability in viewcart.asp in Evolve shopping cart aka Evolve Merchant allows remote attackers to execute arbitrary SQL commands via the zoneid parameter...

CVE-2006-5953

The CVE-2006-5953 issue is an SQL injection in Evolve shopping cart's viewcart.asp, exploitable through the zoneid parameter to execute arbitrary SQL commands. Documented in multiple sources (NVD, CVE lists, PT-2006-6618) confirms the vulnerability and its remote nature but provides no concrete d...