3209 matches found
[SECURITY] Fedora 10 Update: gnome-web-photo-0.3-16.fc10
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
Frog CMS 0.9.4 Traversal / XSS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Evaluation of Frog CMS Version tested: 0.9.4 by Justin C. Klein Keane This advisory is also posted at http://www.madirish.net/vulnerabilities/frog-cms Frog CMS http://www.madebyfrog.com/ is a lightweight content management system written in P...
Cpanel File Manager Cross Site Scripting
Cpanel File Manager XSS Vulnerability Synopsis ------------- Cpanel www.cpanel.net has two file manager application, standard and legacy one to manage files. Both of them are vulnerable to XSS attack. File name is presented unescaped so that an attacker can craft malicious file name to execute...
CPANEL File Manager XSS Vulnerability
Cpanel File Manager XSS Vulnerability Synopsis ------------- Cpanel www.cpanel.net has two file manager application, standard and legacy one to manage files. Both of them are vulnerable to XSS attack. File name is presented unescaped so that an attacker can craft malicious file name to execute...
CVE-2008-6478
Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...
CVE-2008-6478
Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...
CVE-2008-6478
CVE-2008-6478 describes a CSRF vulnerability in the file manager of the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft). The flaw allows remote attackers to perform administrator-level actions by enticing a user to load ...
osCommerce 2.2rc1 Creation / Cross Site Scripting
Module : osCommerce Version : 2.2rc1 Edited by : oscommerce.com/ Download : http://www.oscommerce.com/ Downloadfr : http://www.oscommerce-fr.info/portail/index.php?option=comremository&Itemid=183 Vulnerability : Multiple Vulnerability Author : Jonathan Salwan Mail : submit AT shell-storm.org Web ...
[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-18.fc9
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
Libra PHP File Manager 2.0 Local File Inclusion
! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Libra PHP File Manager eNYe-Sec - www.enye-sec.org You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua = LWP::UserAgent-new; print "\e2J"; system$^O eq 'MSWin32' ? 'cls' :...
Fedora Update for Thunar FEDORA-2007-4385
Check for the Version of Thunar OpenVAS Vulnerability Test Fedora Update for Thunar FEDORA-2007-4385 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-17.fc9
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-15.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-14.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
CVE-2008-4319
fileadmin.php in Libra File Manager aka Libra PHP File Manager 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string...
Authentication flaw
fileadmin.php in Libra File Manager aka Libra PHP File Manager 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string...
CVE-2008-4319
fileadmin.php in Libra File Manager aka Libra PHP File Manager 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string...
CVE-2008-4319
CVE-2008-4319 affects Libra File Manager (Libra PHP File Manager) up to version 1.18. The vulnerability allows remote attackers to bypass authentication and read, modify, or list arbitrary files/directories by injecting certain query parameters (e.g., user and isadmin) in fileadmin.php. The NVD e...