CVE-2008-3267

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6110...

SuSE 10 Security Update : htdig (ZYPP Patch Number 4761)

A flaw in the htsearch Program could be exploited by attackers to conduct cross-site scripting XSS attacks. CVE-2007-6110 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

[SECURITY] [DSA 1429-1] New htdig packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1429-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

RHEL 4 / 5 : htdig (RHSA-2007:1095)

Updated htdig packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ht://Dig system is a complete World Wide Web indexing and searching system for a...

Moderate: htdig security update

3:3.2.0b6-4 - CVE-2007-6110...

Fedora 7 : htdig-3.2.0b6-12.fc7 (2007-3907)

CVE-2007-6110 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2007-6110

Cross-site scripting XSS vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2006-6110

CVE-2006-6110 describes multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System. The affected components are the web entry points publications_list.asp (parameter vjob) and publication_view.asp (parameter InfoID). Exploitation would allow remote attackers t...

CVE-2002-1833

The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...

CVE-2002-1836

Xerox DocuTech 6110/6115 default configuration exports certain NFS shares globally with world-writable permissions, enabling remote modification of sensitive files. Root cause: misconfigured NFS exports allowing write access from any host. Impact: potential integrity risk to exposed files; no exp...

CVE-2002-1835

Affected product: Xerox DocuTech 6110/6115 running Solaris 8.0. The issue arises from default configuration leaving many services enabled (e.g., RPC, sprayd), which could allow remote attackers to gain access to the device. Impact is described as potentially enabling access to the device; the pro...

CVE-2002-1833

The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...