900 matches found
CVE-2006-7069
PHP remote file inclusion vulnerability in smartyconfig.php in Socketwiz Bookmarks 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the rootdir parameter...
CVE-2006-7069
The CVE-2006-7069 entry documents a PHP remote file inclusion in smarty_config.php within Socketwiz Bookmarks 2.0 and earlier. The vulnerability arises from accepting user-controlled input via the root_dir parameter, enabling an attacker to execute arbitrary PHP code remotely. The referenced NVD ...
CVE-2006-7069: Undefined Security Weakness
PHP remote file inclusion vulnerability in smartyconfig.php in Socketwiz Bookmarks 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the rootdir parameter...
Critical: seamonkey security update
seamonkey-1.0.8-0.1.el4.0.1: 1.0.8-0.1.el4.0.1 - Replace default bookmarks and prefs 1.0.8-0.1.el4 - Update to 1.0.8 RC 1.0.7-0.2.el4 - added fix for 204589: mozilla-config points to the wrong places devhelp-0.10-0.7.el4: 0.10-0.7.el4 - Rebuild against newer gecko...
Critical: Firefox security update
1.5.0.10-0.1.el4.0.1 - Replace default bookmarks and prefs 1.5.0.10-0.1.el4 - Update to 1.5.0.10 RC 1.5.0.9-0.2.el4 - Fix langpack support to start in the user's locale where possible...
Fedora Core 5 : kdebase-3.5.3-0.3.fc5 (2006-726)
Thu Jun 15 2006 Than Ngo 6:3.5.3-0.3.fc5 - fix BR - Wed Jun 14 2006 Than Ngo 6:3.5.3-0.2.fc5 - apply patch to to fix 194659, CVE-2006-2449 KDM symlink attack vulnerability thanks to KDE security team - Thu Jun 8 2006 Than Ngo 6:3.5.3-0.1.fc5 - update to 3.5.3 - Fri May 12 2006 Than Ngo...
Critical seamonkey security update
1.0.7-0.1.el4.1 - Replace default bookmarks and prefs 1.0.7-0.1.el4 - Update to 1.0.7 RC...
Critical firefox security update
1.5.0.9-0.1.el4.1 - Replace default bookmarks and prefs 1.5.0.9-0.1.el4 - Update to 1.5.0.9 RC - Update the pango patches to support mathml and various other fixes. - Let Firefox handle gcc warnings; it weeds out frequent offenders...
CVE-2006-6359
Cross-site scripting XSS vulnerability in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-6359
Cross-site scripting XSS vulnerability in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-6359
CVE-2006-6359 is an XSS vulnerability in Stefan Frech’s online-bookmarks 0.6.12 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Public sources (NVD) assign a Medium severity (CVSS v2: AV:N/AC:M/Au:N/C:P/I:P/A:P, base 6.8). Gentoo GLSA 200901-08 lists t...
CVE-2006-6358
This CVE affects the Online-Bookmarks project (version 0.6.12) and relates to the login function in auth.inc, where an SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) username and possibly (2) password parameters. The underlying cause is insuffici...
Critical firefox security update
1.5.0.8-0.1.1.el4 - Replace default-bookmarks.html and default-prefs.js 1.5.0.8-0.1.el4 - Update to 1.5.0.8 RC 1.5.0.7-0.1.el4 - Update to 1.5.0.7 1.5.0.5-0.el4.1 - Update to 1.5.0.5...
Critical seamonkey security update
1.0.6-0.1.1.el4 - Replace bookmarks and prefs 1.0.6-0.1.el4 - Update to 1.0.6 RC 1.0.5-0.1.el4 - Update to 1.0.5...
Critical seamonkey security update
1.0.6-0.1.1.el4 - Replace bookmarks and prefs 1.0.6-0.1.el4 - Update to 1.0.6 RC 1.0.5-0.1.el4 - Update to 1.0.5...
Critical firefox security update
1.5.0.8-0.1.1.el4 - Replace default-bookmarks.html and default-prefs.js 1.5.0.8-0.1.el4 - Update to 1.5.0.8 RC 1.5.0.7-0.1.el4 - Update to 1.5.0.7 1.5.0.5-0.el4.1 - Update to 1.5.0.5...
CVE-2006-6359: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-6358: Undefined Security Weakness
SQL injection vulnerability in the login function in auth.inc in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to execute arbitrary SQL commands via the 1 username and possibly the 2 password parameter. NOTE: some of these details are obtained from third party information...
vg-onlinebookmarks-3-12-2006.txt
3/12/06 Vigilon Advisory http://www.vigilon.com/vg-onlinebookmarks-3-12-2006.txt ------------------------------------------------------- Application: OnLine Bookmarks Web Site: http://www.frech.ch/online-bookmarks/ Versions: 0.6.12 Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting...
Online BookMarks Multiple SQL Injection/XSS Vulnerabilities
3/12/06 Vigilon Advisory http://www.vigilon.com/vg-onlinebookmarks-3-12-2006.txt ------------------------------------------------------- Application: OnLine Bookmarks Web Site: http://www.frech.ch/online-bookmarks/ Versions: 0.6.12 Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting...