SuSE 10 Security Update : OpenLDAP2 (ZYPP Patch Number 6485)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2008-6485

CVE-2008-6485 : The connected documents confirm a SQL injection in SoftComplex PHP Image Gallery, specifically in index.php via the ctg parameter. The root cause is unsafe SQL construction in the application, enabling remote attackers to execute arbitrary SQL commands with the potential for parti...

CVE-2008-6485

creationtimestamp| type| source ---|---|--- 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7026 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7021...

CVE-2007-6485

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...

CVE-2007-6485

CVE-2007-6485 affects Centreon/Oreon 1.4.1. It enables remote PHP code execution via the fileOreonConf parameter in MakeXML.php and MakeXML4statusCounter.php under include/monitoring/engine/, exploitable by unauthenticated attackers over the network. The root cause is improper handling/sanitizati...

CVE-2006-6485

CVE-2006-6485 describes multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the prevlocation parameter in shopper/sc/registration.cgi and other unspecified vectors. The NVD metrics rate a bas...