CVE-2009-2103: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Frontend MP3 Player femp3player 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-1938: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel...

[20090603] - Core - Frontend XSS

Some values were output from the database without being properly escaped. Most strings in question were sourced from the administrator panel...

Debian DSA-1779-1 : apt - several vulnerabilities

Two vulnerabilities have been discovered in APT, the well-known dpkg frontend. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1300 In time zones where daylight savings time occurs at midnight, the apt cron.daily script fails, stopping new security...

Debian Security Advisory DSA 1764-1 (tunapie)

The remote host is missing an update to tunapie announced via advisory DSA 1764-1. OpenVAS Vulnerability Test $Id: deb17641.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1764-1 tunapie Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-6685

Unspecified vulnerability in Frontend Filemanager airfilemanager 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2008-6685

The CVE-2008-6685 entry concerns Frontend Filemanager (air_filemanager) 0.6.1 and earlier TYPO3 extension. It describes an unspecified vulnerability that allows remote attackers to execute arbitrary commands via unknown vectors. The available sources confirm the affected software and the remote c...

CVE-2008-6685

Unspecified vulnerability in Frontend Filemanager airfilemanager 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

CVE-2008-6685: Undefined Security Weakness

Unspecified vulnerability in Frontend Filemanager airfilemanager 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

Debian DSA-1764-1 : tunapie - several vulnerabilities

Several vulnerabilities have been discovered in Tunapie, a GUI frontend to video and radio streams. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1253 Kees Cook discovered that insecure handling of temporary files may lead to local denial of servi...

Information disclosure

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

CVE-2009-1264

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

CVE-2009-1264

The CVE concerns TYPO3 Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier, where access rights were not properly verified, allowing remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors. Affected versions are 2.5.20 and e...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

DSA-1764-1 tunapie - several vulnerabilities

Bulletin has no description...

CVE-2009-1264: Undefined Security Weakness

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

Information Disclosure in third party extension "Frontend User registration"

It has been discovered that the TYPO3 extension "Frontend User Registration" srfeuserregister is susceptible to Information Disclosure. Release Date: April 6, 2009 Component Type: Third party extension. This extension is not a part of a TYPO3 default installation. Affected Versions: 2.5.20 and al...

Zabbix Multiple Frontend CSRF (Password reset & command execution)

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-006 - Zabbix Multiple Frontend CSRF Application: Zabbix 1.6.2 Vendor: Zabbix Vendor website: http://www.zabbix.com Author: Adam Baldwin [email protected] I. BACKGROUND "ZABBIX is an enterprise-class open source...

FreeBSD : zabbix -- php frontend multiple vulnerabilities (03140526-1250-11de-a964-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in the ZABBIX PHP frontend, which can be exploited by malicious people to conduct cross-site request forgery attacks and malicious users to disclose sensitive information and compromise a vulnerable system. Input appended to and passed via...