51 matches found
DEBIAN-CVE-2016-7982
Directory traversal vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the varurl parameter in a validerxml action...
CVE-2016-7982
SPIP CVE-2016-7982 is a directory traversal/file enumeration vulnerability in the ecrire/exec/valider_xml.php handler (valider_xml action) affecting SPIP 3.1.2 and earlier. The underlying issue allows remote attackers to enumerate system files via the var_url parameter, enabling potential exposur...
SPIP 3.1.13.1.2 - File Enumeration Path Traversal
SPIP 3.1.13.1.2 - File Enumeration Path Traversal SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal CVE-2016-7982 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software,...
SPIP 3.1.2 File Enumeration / Path Traversal Vulnerabilities
Exploit for php platform in category web applications SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal CVE-2016-7982 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software,...
SPIP 3.1.2 File Enumeration / Path Traversal
SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal CVE-2016-7982 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distributed under the GNU/GPL licence. Vulnerability...
SPIP 3.1.1/3.1.2 - File Enumeration / Path Traversal
SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal CVE-2016-7982 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distributed under the GNU/GPL licence. Vulnerability...
CVE-2016-7982
creationtimestamp| type| source ---|---|--- 2016-10-19 20:59:19+00:00| published-proof-of-concept| https://t.me/FullDisclosure/187 2016-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40596...
CVE-2014-7982
Cross-site scripting XSS vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-7982
CVE-2014-7982 covers a cross-site scripting (XSS) flaw in Joomla! CMS. Affected versions: Joomla! 2.5.x before 2.5.19 and 3.x before 3.2.3. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry assigns a CVSSv2 base score of 4.3 (M...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7982)
This version upgrade of flash-player fixes multiple security issues that could potentially be exploited to cause a crash or even execute arbitrary code. The following CVE were assigned : CVE-2012-0752 / CVE-2012-0753 / CVE-2012-0754 / CVE-2012-0755 / CVE-2012-0756 / CVE-2012-0767 %NASLMINLEVEL...