CVE-2016-5737

The CVE-2016-5737 entry describes a vulnerability in the OpenStack puppet-gerrit module (OpenStack-infra). The root cause is that Gerrit configuration improperly marks text/html as a safe mimetype, which could allow remote attackers to perform cross-site scripting (XSS) via a crafted review. The ...

CVE-2016-5737

The Gerrit configuration in the Openstack Puppet module for Gerrit aka puppet-gerrit improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting XSS attacks via a crafted review...

CVE-2016-5737

The Gerrit configuration in the Openstack Puppet module for Gerrit aka puppet-gerrit improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting XSS attacks via a crafted review...

CVE-2016-5737: Improper Neutralization of Input During Web Page Generation

The Gerrit configuration in the Openstack Puppet module for Gerrit aka puppet-gerrit improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting XSS attacks via a crafted review...

PT-2017-8755

Name of the Vulnerable Software and Affected Versions Openstack Puppet module for Gerrit affected versions not specified Description The issue is related to the Gerrit configuration in the Openstack Puppet module, where text/html is improperly marked as a safe mimetype. This could potentially all...

Openstack-infra puppet-gerrit module cross-site scripting vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Openstack-infra is the infrastructure used in it. puppet-gerrit is one of the components used to install gerrit and manage the OpenStack infrastructure. A cross-site...

CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3832

CVE-2006-3832 affects Loudblog 0.5 and earlier. The vulnerability is an SQL injection in the index.php script where the vulnerable code uses the request parameter id directly in a database query, enabling remote attackers to execute arbitrary SQL commands. The confirmed impact includes potential ...

CVE-2006-3832: Undefined Security Weakness

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...