GForge多个SQL注入漏洞

BUGTRAQ ID: 31674 CVECAN ID: CVE-2008-6187,CVE-2008-6188,CVE-2008-6189 GForge是用于管理软件开发周期的工具。 GForge的new/index.php、news/index.php和top/topusers.php文件没有正确地过滤offset输入参数： function dbquery$qstring,$limit='-1',$offset=0 global $QUERYCOUNT; $QUERYCOUNT++; if $limit 0 if !$offset || $offset 0 $offset=0;...

Fedora Update for chmsee FEDORA-2008-6491

Check for the Version of chmsee OpenVAS Vulnerability Test Fedora Update for chmsee FEDORA-2008-6491 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for trac FEDORA-2008-6833

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2008-6833 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for xemacs-packages-extra FEDORA-2008-5504

Check for the Version of xemacs-packages-extra OpenVAS Vulnerability Test Fedora Update for xemacs-packages-extra FEDORA-2008-5504 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for Django FEDORA-2008-4248

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2008-4248 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Core 10 FEDORA-2009-1291 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1291. OpenVAS Vulnerability Test $Id: fcore20091291.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1291 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] Fedora 10 Update: nss-3.12.2.0-4.fc10

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Mono ASP.NET action Attribute XSS

The remote host is running Mono, an open source, UNIX implementation of the Microsoft .NET development platform. The version of Mono installed on the remote host fails to encode user-supplied input to the URL before using it for the default 'action' of a form. An attacker may be able to leverage...

RedHat Security Advisory RHSA-2009:0015

The remote host is missing updates announced in advisory RHSA-2009:0015. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...

SOL9592 - bzip2 vulnerability CVE-2008-1372

Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge. F5 Product Development tracked this issue as CR114442 and CR107644 for BIG-IP LTM, GTM...

Critical: Red Hat Security Advisory: java-1.5.0-ibm security update

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The IBM 1.5.0 Java release includes the IBM Java 2...

OpenJDK Buffer overflow in image processing (6726779)

Buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the...

JRE allows unauthorized memory read access via a crafted ZIP file

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

JavaWebStart allows unauthorized network connections

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via unknown vectors, aka...

OpenJDK Truetype Font processing vulnerability (6751322)

Integer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which...

Critical: Red Hat Security Advisory: java-1.6.0-ibm security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The IBM 1.6.0 Java release includes the IBM Java 2...

Visuplay CMS SQL Injection

http://www.visuplay.com Visuplay is a web dev company that offers a CMS that goes with its websites that helps it be managed after all, that Is what a cms does right? Anywho, you can add your own sql code to various query areas through out the CMS like newsarticle.php and contentpage.php. Here's ...

GForge GroupJoinRequest.class远程SQL注入漏洞

BUGTRAQ ID: 33086 CVECAN ID: CVE-2008-2381 GForge是用于管理软件开发周期的工具。 GForge的common/include/GroupJoinRequest.class文件中没有正确地验证对create函数的输入，远程攻击者可以通过提交恶意的SQL查询请求注入并执行恶意代码。 GForge GForge 4.6 GForge GForge 4.5 GForge ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CoolPlayer 2.19 - .Skin Local Buffer Overflow

CoolPlayer 2.19 - .Skin Local Buffer Overflow / CoolPlayer 2.19 Skin File Local Buffer Overflow Exploit Advisory: http://www.bmgsec.com.au/advisory/43/ Test box: WinXP Pro SP2 English Code reference is in skin.c, lines 464 - 480 Written and discovered by: r0ut3r writ3r at gmail.com /...

JVN#50327700 PHP vulnerable to cross-site scripting

PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest upda...