5664 matches found
CVE-2012-5164
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...
CVE-2012-5164: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...
Fedora 16 : zabbix-1.8.15-1.fc16 (2012-12488)
Release notes: http://www.zabbix.com/rn1.8.15.php Amongst others : - Solves SQL injection vulnerability CVE-2012-3435 - Removes useless backup files from the frontend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...
PT-2012-2091
Name of the Vulnerable Software and Affected Versions com techfolio version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catid parameter in the frontend/models/techfoliodetail.php file of the Techfolio component for Joomla!...
CVE-2011-5113: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio comtechfolio component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2012-4259
CVE-2012-4259 affects C4B XPhone Unified Communications UC, specifically the XPhone UC Web/ web frontend for XPhone Virtual Directory (2011 Web 4.1.890S R1). The vulnerability is a cross-site scripting (XSS) issue allowing remote attackers to inject arbitrary script via the company name in the Co...
Ganglia Detection (HTTP)
HTTP based detection of Ganglia. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103534";...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
the Xen implementation did not prevent applications running in a para-virtualized guest from modifying CR4 TSC. This could cause a local denial of service. CVE-2007-5907, Important - Tavis Ormandy reported missing boundary checks in the Virtual Dynamic Shared Objects vDSO implementation. This...
Fedora Update for cantor FEDORA-2011-13417
Check for the Version of cantor OpenVAS Vulnerability Test Fedora Update for cantor FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
phpDenora 1.4.6 SQL Injection
Title : phpDenora = 1.4.6 Multiple SQL Injection Vulnerabilities Author : P. de Brouwer - KnickLighter @knickz0r NLSecurity - www.nlsecurity.org [email protected] Dork : intext:"Powered by phpDenora" Software : phpDenora = 1.4.6 http://sourceforge.net/projects/phpdenora/files/phpDenora/1.4.6/...
phpDenora 1.4.6 - Multiple SQL Injections
Title : phpDenora = 1.4.6 Multiple SQL Injection Vulnerabilities Author : P. de Brouwer - KnickLighter @knickz0r NLSecurity - www.nlsecurity.org [email protected] Dork : intext:"Powered by phpDenora" Software : phpDenora = 1.4.6 http://sourceforge.net/projects/phpdenora/files/phpDenora/1.4.6/...
CVE-2012-1207
Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter to frontend/js.php...
PT-2012-3130
Name of the Vulnerable Software and Affected Versions Fork CMS versions 3.2.4 and earlier Description A directory traversal issue allows remote attackers to read arbitrary files via a .. dot dot in the module parameter to "frontend/js.php". This could potentially expose sensitive information...
CVE-2012-1207: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter to frontend/js.php...
FreeBSD Ports: zabbix-frontend
The remote host is missing an update to the system as announced in the referenced advisory. VID 048c77df-3211-11e1-9583-14dae938ec40 OpenVAS Vulnerability Test $ Description: Auto generated from VID 048c77df-3211-11e1-9583-14dae938ec40 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: zabbix-frontend
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Joomla Component com_frontenduseraccess 3.4.0 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
FreeBSD : zabbix-frontend -- multiple XSS vulnerabilities (048c77df-3211-11e1-9583-14dae938ec40)
Martina Matari reports : These URLs hostgroups.php, usergrps.php are vulnerable to persistent XSS attacks due to improper sanitation of gname variable when creating user and host groups. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...
Fedora Update for cacti FEDORA-2011-17049
Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2011-17049 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...