54 matches found
Fedora Update for zabbix FEDORA-2014-5551
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-6086
libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPTSSLVERIFYHOST option for libcurl, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2012-6086
The CVE-2012-6086 issue affects Zabbix releases: 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2. The root cause is that libs/zbxmedia/eztexting.c does not properly set CURLOPT_SSL_VERIFYHOST for libcurl, enabling a man-in-the-middle attack where an attacker could spoof SSL ...
Fedora Update for zabbix FEDORA-2013-22764
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for zabbix FEDORA-2013-18348
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 18 : zabbix-2.0.8-3.fc18 (2013-18348)
New upstream version 2.0.8 - Patch for CVE-2013-5743 SQL injection vulnerability, ZBX-7091 - Patch for ZBX-6922 Failing host XML import - SQL speed-up patch for graphs ZBX-6804 - Require php-ldap and ZBX-6992 Service SQL - Create and configure a spooling directory for fping files outside of /tmp...
Fedora 19 : zabbix-2.0.6-3.fc19 (2013-14029)
This update solves a security issue involving the use of libcurl in the code used to access the eztexting service. It potentially allows for man-in-the-middle attacks. The issue was described as CVE-2012-6086. Please refer to https://support.zabbix.com/browse/ZBX-5924 for details! Note that Tenab...
CVE-2008-6086
The CVE-2008-6086 entry describes an SQL injection vulnerability in Camera Life 2.6.2b4, exposed via album.php. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the id parameter, representing a different vector from CVE-2008-3355. According to the NVD en...
CVE-2008-6086
creationtimestamp| type| source ---|---|--- 2008-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6710...
CVE-2008-3265
creationtimestamp| type| source ---|---|--- 2008-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6086...
CVE-2007-6086
CVE-2007-6086 is a directory-traversal vulnerability in VigileCMS 1.4. The issue occurs in index.php where directory traversal sequences in the module parameter allow remote attackers to include and execute arbitrary local files. This leads to arbitrary code execution and partial/complete comprom...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in eArk e-Ark 1.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the cfgvcardpath parameter to src/vcardinc.php or 2 the cfgphpmailerpath parameter to src/emailinc.php. NOTE: the arkinc.php vector is already covered by...
CVE-2006-6086
Summary of findings: CVE-2006-6086 and related entries describe PHP remote file inclusion vulnerabilities in eArk (e-Ark) 1.0. The trusted sources show that: (1) CVE-2006-6086 affects src/ark_inc.php, allowing remote attackers to execute arbitrary PHP code via a URL in the cfg_pear_path parameter...
