Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerability

Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerability: The Jakarta Commons HttpClient and Apache httpcomponents HttpClient components may be susceptible to a 'Man in the Middle Attack' due to a flaw in the default hostname verification during SSL/TLS whe...

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

It was found that the fix for CVE-2012-6153 was incomplete: the code added to check that the server hostname matches the domain name in a subject's Common Name CN field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially...

Axis2 -- Security vulnerabilities on dependency Apache HttpClient

Apache Axis2 reports: Apache Axis2 1.7.4 is a maintenance release that includes fixes for several issues, including the following security issues: Session fixation AXIS2-4739 and XSS AXIS2-5683 vulnerabilities affecting the admin console. A dependency on an Apache HttpClient version affected by...

Successful Shell Attack Detected - Linux 'w' Command

Binary data 6153.prm...

CVE-2008-6153

The CVE-2008-6153 issue is a SQL injection in Photo.asp of Jay Patel’s Pixel8 Web Photo Album 3.0. The vulnerability is exploitable via the AlbumID parameter, allowing remote attackers to execute arbitrary SQL commands. This is evidenced by the NVD description and corroborating sources, which ide...

CVE-2008-6153

creationtimestamp| type| source ---|---|--- 2008-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7627...

CVE-2008-3368

creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6153...

CVE-2006-6153

CVE-2006-6153 affects the vSpin.net Classified System 2004. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) catname in cat.asp and (2) minprice in search.asp. The underlyin...