Code injection

Unspecified vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."...

Cross site scripting

Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3029

Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3043

Technical details about CVE-2008-3043 are not publicly available in the provided documents. The connected entries repeat the vulnerability description without disclosing affected products, versions, root cause, or exploits. Monitor for updates.

CVE-2008-3029

Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3029

Technical details for CVE-2008-3029 are not publicly available in the provided documents. No affected products, versions, vectors, or patches are specified here. Monitor for updates.

CVE-2008-3043

Unspecified vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."...

CVE-2008-3043: Improper Control of Generation of Code

Unspecified vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."...

CVE-2008-3029: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a 1 mail message or 2 discussion board message. NOTE: this might overlap CVE-2005-1076...

CVE-2008-1225

Multiple cross-site scripting XSS vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a 1 mail message or 2 discussion board message. NOTE: this might overlap CVE-2005-1076...

CVE-2008-1225: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a 1 mail message or 2 discussion board message. NOTE: this might overlap CVE-2005-1076...

phpnukemye-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery "gid" Remote SQL Injection Dork: inurl:"modules.php?name=MyeGallery"...

[SECURITY] Fedora 7 Update: mailman-2.1.9-5.3

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

[SECURITY] Fedora 8 Update: mailman-2.1.9-8.2.fc8

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

MyBulletinBoard (MyBB) <= 1.2.10 Multiple Remote Vulnerabilities

No description provided by source. waraxe-2008-SA061 - Remote Code Execution in MyBB 1.2.10 =============================================================================== Author: Janek Vind "waraxe" Independent discovery: koziolek Date: 16. January 2008 Location: Estonia, Tartu Web:...

waraxe-2008-SA-062.txt

waraxe-2008-SA062 - Multiple Sql Injections in MyBB 1.2.10 =============================================================================== Author: Janek Vind "waraxe" Date: 16. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-62.html Target software description: MyBB is a...

RHEL 4 : mailman (RHSA-2007:0779)

Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...

Low: Red Hat Security Advisory: mailman security and bug fix update

Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...

Sql injection

SQL injection vulnerability in signin.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...