SuSE 10 Security Update : Xine (ZYPP Patch Number 6229)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2008-6229

Cross-site scripting XSS vulnerability in the administrative interface in Drupal Content Construction Kit CCK 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal, allows remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via 1 field...

CVE-2008-6229

CVE-2008-6229 is a browser-based XSS vulnerability in the Drupal Content Construction Kit (CCK) module. The issue affects Drupal CCK 5.x prior to 5.x-1.10 and 6.x prior to 6.x-2.0, where remote authenticated users with the admin:ister content permission can inject arbitrary script/HTML via (1) fi...

CVE-2008-6229

Cross-site scripting XSS vulnerability in the administrative interface in Drupal Content Construction Kit CCK 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal, allows remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via 1 field...

CVE-2007-6229

CVE-2007-6229 describes a PHP remote file inclusion in Rayzz Script 2.0. The vulnerability affects the file common/classes/class_HeaderHandler.lib.php and permits remote attackers to execute arbitrary PHP code by supplying a URL in the CFG[site][project_path] parameter. The NVD entry cites a CVSS...

CVE-2006-6229

The CVE-2006-6229 entry affects Codewalkers ltwCalendar (aka PHP Event Calendar) prior to 4.2.1. The underlying issue is that failed login attempts are logged, which could allow an attacker to infer correct passwords from the log file. The available records specify the affected software and the v...