CVE-2009-3488

Cross-site scripting XSS vulnerability in the Bibliography aka Biblio module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479...

CVE-2009-3479: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Bibliography Biblio 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title...

SA-CONTRIB-2009-064 - Bibliography module - Cross Site Scripting

The Bibliography module also known as Biblio allows users manage and display lists of scholarly publications. The Biblio module creates customized views in order to display these listings, and these listings contain text entered by users with the 'create biblio' permission. In some cases, the...

CVE-2009-3488: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Bibliography aka Biblio module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479...

SA-CONTRIB-2009-048 - Bibliography Module - Cross Site Scripting

The Bibliography module Biblio allows users to manage and display lists of scholarly publications. The module contains a cross site scripting vulnerability because it does not properly sanitize output of titles before display. A user who has the permission to create content displayed by the...

CVE-2009-1284

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...

CVE-2009-1284

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...

DEBIAN-CVE-2009-1284

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...

Buffer overflow

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...

CVE-2006-5931

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to certain PHP scripts in 1 lib/actions/, 2 lib/displays/, 3...

aigaion-rfi.txt

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion <= 1.2.1 (DIR) Remote File Include Vulnerabilities

No description provided by source. Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

CVE-2006-5930: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to 1 basicfunctions.php, or 2 pageactionauthor.php...

CVE-2006-5930

Aigaion Web-based bibliography management system (versions 1.2.1 and earlier) is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the DIR parameter for (1) _basicfunctions.php or (2) pageactionauth...

CVE-2006-5931

CVE-2006-5931 affects Aigaion Web-based bibliography management system 1.2.1. The issue is multiple PHP remote file inclusion vulnerabilities when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to scripts under lib/actions/, lib...

CVE-2006-5931: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to certain PHP scripts in 1 lib/actions/, 2 lib/displays/, 3...

bib-rfi.txt

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion Web Interface remote file inclusion

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

ContentNow Directory Traversal(upload.php)

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion <= 1.2.1 (DIR) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Aigaion = 1.2.1 DIR Remote File Include Vulnerabilities ========================================================== Software:Web based bibliography management system Download link:...