Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection

Tuleap - Command Injection in Project Wiki CVE: CVE-2017-7981 CVSSv3: 9.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C Versions affected: = 8.3 and = 9.6.99.86 Introduction Tuleap is a Libre suite to plan, track, code and collaborate on software projects. Tuleap helps development...

Tuleap 9.6.99.86 Command Injection Vulnerability

Exploit for php platform in category web applications Tuleap - Command Injection in Project Wiki CVE: CVE-2017-7981 CVSSv3: 9.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C Versions affected: = 8.3 and = 9.6.99.86 Introduction Tuleap is a Libre suite to plan, track, code and...

CVE-2017-7981

CVE-2017-7981 affects Tuleap before 9.7, where the Project Wiki uses PHPWiki 1.3.10 with a SyntaxHighlighter plugin. The root cause is a command-injection vector in the SyntaxHighlighter’s handling of the syntax argument, exploited via proc_open in PHP when a project wiki page contains a line lik...

Tuleap 9.6.99.86 Command Injection

Tuleap - Command Injection in Project Wiki CVE: CVE-2017-7981 CVSSv3: 9.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C Versions affected: = 8.3 and = 9.6.99.86 Introduction Tuleap is a Libre suite to plan, track, code and collaborate on software projects. Tuleap helps development...

CVE-2016-7981

Cross-site scripting XSS vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action...

CVE-2016-7981

Cross-site scripting XSS vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action...

CVE-2016-7981

Cross-site scripting XSS vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action...

CVE-2016-7981

Summary: CVE-2016-7981 is an XSS vulnerability in SPIP 3.1.2 and earlier. The issue occurs in the valider_xml.php handler, where the var_url parameter in a valider_xml action can be exploited by remote attackers to inject arbitrary web script or HTML into victims’ browsers. This is confined to SP...

SPIP 3.1.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications SPIP 3.1.2 Reflected Cross-Site Scripting CVE-2016-7981 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distribute...

CVE-2016-7981

creationtimestamp| type| source ---|---|--- 2016-10-19 20:44:12+00:00| published-proof-of-concept| https://t.me/FullDisclosure/177...

SPIP 3.1.2 Cross Site Scripting

SPIP 3.1.2 Reflected Cross-Site Scripting CVE-2016-7981 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distributed under the GNU/GPL licence. Vulnerability Description...

openSUSE: Security Advisory for vlc (openSUSE-SU-2016:1652-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : vlc (openSUSE-2016-754)

This update for vlc to 2.2.4 to fix the following security issue : - CVE-2016-5108: Fix out-of-bound write in adpcm QT IMA codec boo984382. This also include an update of codecs and libraries to fix these 3rd party security issues : - CVE-2016-1514: Matroska libebml EbmlUnicodeString Heap...

Security update for vlc (important)

This update for vlc to 2.2.4 to fix the following security issue: - CVE-2016-5108: Fix out-of-bound write in adpcm QT IMA codec boo984382. This also include an update of codecs and libraries to fix these 3rd party security issues: - CVE-2016-1514: Matroska libebml EbmlUnicodeString Heap Informati...

SUSE SLES10 Security Update : java-1_6_0-ibm (SUSE-SU-2016:0776-1) (SLOTH)

IBM Java was updated to version 6.0-16.20, fixing various security issues. More information can be found on http://www.i bm.com/developerworks/java/jdk/alerts/. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Fedora 23 : libpng12-1.2.56-1.fc23 (2015-39499d9af8)

Latest upstream release, includes fixes for security vulnerabilities: CVE-2015-7981, CVE-2015-8126, CVE-2015-8540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 22 : libpng12-1.2.56-1.fc22 (2015-ac8100927a)

Latest upstream release, includes fixes for security vulnerabilities: CVE-2015-7981, CVE-2015-8126, CVE-2015-8540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 22 : libpng10-1.0.64-1.fc22 (2015-ec2ddd15d7)

An out-of-bounds read in pngconverttorfc1123 in png.c could potentially be exploited by a crafted PNG file to leak information from an application's memory CVE-2015-7981. Buffer overflow vulnerabilities in functions pnggetPLTE/pngsetPLTE, allowing remote attackers to cause DoS to application or...

Fedora 23 : libpng10-1.0.64-1.fc23 (2015-1d87313b7c)

An out-of-bounds read in pngconverttorfc1123 in png.c could potentially be exploited by a crafted PNG file to leak information from an application's memory CVE-2015-7981. Buffer overflow vulnerabilities in functions pnggetPLTE/pngsetPLTE, allowing remote attackers to cause DoS to application or...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2016:0433-1) (SLOTH)

This update for java-170-ibm fixes the following issues by updating to 7.0-9.30 bsc963937 : - CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances - CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack...