CVE-2009-1408

CVE-2009-1408 affects webSPELL 4.2.0c with a cross-site scripting (XSS) flaw in BBCode handling. The described vulnerability enables remote attackers to inject arbitrary web script or HTML by abusing Javascript events (e.g., onmouseover) inside nested BBCode tags (email, img, url). Multiple sourc...

CVE-2009-1411

CVE-2009-1411 describes an SQL injection in the Events plugin for Seditio CMS 1.0. The vulnerability exists in events/inc/events.inc.php and allows remote attackers to inject arbitrary SQL via the c parameter to plug.php. This leads to potential confidentiality and integrity impacts on the affect...

CVE-2009-1408

Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...

MDVA-2009:006 : xen

The xen package released in Mandriva Linux 2009.0 lacks udev rules for handling hotplug events. As a result trying to create an HVM host will fail with this kind of error message: 'Error: Device 0 vif could not be connected Hotplug scripts not working'. Additionaly, it also add PCI pass-through...

MDVA-2008:104 : x11-driver-input-evdev

This update corrects two issues with the evdev driver Xorg. The first is that button events were not generated for mice with more than seven buttons bug 39014; the second is that the pointer did not cross screens using the evdev driver. This update corrects both issues. %NASLMINLEVEL 70300...

MDKA-2007:129 : acpid

The acpid daemon wrote a lot of information about ACPI events in the system logs, making harddisks too busy on laptops. This update package suppresses these events logs in the default setup, and enables them in debug mode only. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

MDVA-2008:165 : gnome-power-manager

Some button press events where handled two times because they were reported both by X and by Hal. This update adds some code to detect them and ignore the duplicate events. This update also adds a gconf key /schemas/apps/gnome-power-manager/general/logoutcommand to allow using gnome-power-manager...

Ubuntu 8.04 LTS : firefox-3.0, xulrunner-1.9 regression (USN-645-3)

USN-645-1 fixed vulnerabilities in Firefox and xulrunner. The upstream patches introduced a regression in the saved password handling. While password data was not lost, if a user had saved any passwords with non-ASCII characters, Firefox could not access the password database. This update fixes t...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

Seditio CMS Events Plugin (c) Remote SQL Injection Vulnerability

No description provided by source. +=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContac...

Seditio CMS Events Plugin - c SQL Injection

Seditio CMS Events Plugin - c SQL Injection +=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBo...

Seditio CMS Events SQL Injection

+=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog :...

Seditio CMS Events Plugin (c) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Seditio CMS Events Plugin c Remote SQL Injection Vulnerability ================================================================...

Seditio CMS Events Plugin - 'c' SQL Injection

+=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog :...

Mandriva Update for gnome-power-manager MDVA-2008:165 (gnome-power-manager)

Check for the Version of gnome-power-manager OpenVAS Vulnerability Test Mandriva Update for gnome-power-manager MDVA-2008:165 gnome-power-manager Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for gnome-power-manager MDVA-2008:165 (gnome-power-manager)

Check for the Version of gnome-power-manager OpenVAS Vulnerability Test Mandriva Update for gnome-power-manager MDVA-2008:165 gnome-power-manager Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for acpid MDKA-2007:129 (acpid)

Check for the Version of acpid OpenVAS Vulnerability Test Mandriva Update for acpid MDKA-2007:129 acpid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for util-linux-ng MDVSA-2008:114 (util-linux-ng)

Check for the Version of util-linux-ng OpenVAS Vulnerability Test Mandriva Update for util-linux-ng MDVSA-2008:114 util-linux-ng Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2008-6608

Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter aka user field to admin/index.php, 2 the userpass parameter aka pass field to admin/index.php, or 3 the id parameter to...