Fedora Update for wyrd FEDORA-2008-1963

Check for the Version of wyrd OpenVAS Vulnerability Test Fedora Update for wyrd FEDORA-2008-1963 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2009-0256

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to 1 frontend and 2 backend authentication...

CVE-2009-0256

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to 1 frontend and 2 backend authentication...

Cross site scripting

Cross-site scripting XSS vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-5656

Cross-site scripting XSS vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross-Site Scripting vulnerability in TYPO3 Core

It has been discovered that the frontend plugin of system extension "felogin" is vulnerable to Cross-Site Scripting XSS. Component Type: TYPO3 Core Affected Versions: TYPO3 versions 4.2.0, 4.2.1 and 4.2.2 Vulnerability Type: Cross Site Scripting Vulnerability: The frontend plugin of system...

Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani

---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Years Old My Official Website :...

CVE-2008-4656

SQL injection vulnerability in the Frontend Users View feusersview 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Frontend Users View feusersview 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-4656

SQL injection vulnerability in the Frontend Users View feusersview 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: JobControl dmmjobcontrol, Econda Plugin econda, Frontend Users View feusersview, Mannschaftsliste kiddogplayerlist, M1 Intern m1intern, Simple survey simplesurvey, Page Improvements smpageimprovements Please re...

oblog4.6添加后台管理员漏洞

oblog4.6在处理相关数据时存在漏洞 造成可以添加后台管理员。 oblog4.6 sql版 http://www.oblog.cn/ 1、注册一个用户，用户名script，密码123456 2、发布一篇日志，日志标题：测试一下 3、个人前台首页找到日志"测试一下"，点"推荐" 4、个人后台管理，选择"常用"选项中的"推荐日志"，然后点"测试一下"日志后面的修改，把摘要内容修改成： s'//WHERE/ /logid=1;insert//into//oblogadmin//username,pa...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...

CVE-2008-3039

SQL injection vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3052

Unspecified vulnerability in the SQL Frontend mhomsqlio extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...

Improper access control

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control."...

CVE-2008-3042

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...

Sql injection

SQL injection vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3041

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control."...