Debian Security Advisory DSA 2593-1 (moin - several vulnerabilities)

It was discovered that missing input validation in the twikidraw and anywikidraw actions can result in the execution of arbitrary code. This security issue is being actively exploited. This update also addresses path traversal in AttachFile. OpenVAS Vulnerability Test $Id: deb25931.nasl 6611...

Fedora Update for moin FEDORA-2013-0685

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2013-0685 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for moin FEDORA-2013-0685

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moin FEDORA-2013-0600

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-6080

MoinMoin is vulnerable to multiple issues (CVE-2012-6080/6081/6082) in versions 1.9.3–1.9.5. The directory traversal flaw in AttachFile.py’s _do_attachment_move allows remote attackers to overwrite arbitrary files by crafting a filename with .., enabling unauthorized file writes. CVE-2012-6081 de...

CVE-2012-6080

Removed by vendor...

CVE-2008-6080

Directory traversal vulnerability in download.php in the ionFiles comionfiles 4.4.2 component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-6080

Joomla! ionFiles 4.4.2 (com_ionfiles) is vulnerable to Local File Inclusion in download.php, allowing read of arbitrary files via a .. in the file parameter. Affected component: ionFiles 4.4.2 for Joomla!. Root cause: directory traversal in download.php. Impact: potential exposure of sensitive fi...

CVE-2008-6080

Directory traversal vulnerability in download.php in the ionFiles comionfiles 4.4.2 component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-6080

creationtimestamp| type| source ---|---|--- 2008-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32536...

CVE-2008-6080

creationtimestamp| type| source ---|---|--- 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6809...

CVE-2008-1914

Stack-based buffer overflow in the AntServer module AntServer.exe in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information...

CVE-2008-1914

Stack-based buffer overflow in the AntServer module AntServer.exe in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in the AntServer module AntServer.exe in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information...

CVE-2008-1914

Stack-based buffer overflow in the AntServer module AntServer.exe in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information...

BigAnt Server buffer overflow

Buffer overflow on oversized TCP/6080 HTTP request...

CVE-2007-6080

CVE-2007-6080 : SQL injection in the banners module of bcoos, via bid parameter in modules/banners/click.php. Affected versions include 1.0.10 and 1.0.13; remote attackers could execute arbitrary SQL commands. Root cause identified as improper handling of input in the banners/click.php script. No...

CVE-2006-6080

Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the 1 catID or 2 editorID parameter...

CVE-2006-6080

The CVE-2006-6080 entry describes multiple SQL injection vulnerabilities in categories.asp of gNews Publisher, exploitable via the (1) catID or (2) editorID parameters. Remote attackers could execute arbitrary SQL commands. Affected component: categories.asp in gNews Publisher; vulnerability is d...