CVE-2009-1596: Improper Authentication

Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password aka canChangePassword console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwdchange IQ packet...

HP-UX Update for Ignite-UX HPSBUX00111

Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX00111 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

HP-UX Update for Ignite-UX HPSBUX01219

Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX01219 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

HP-UX Update for Ignite-UX HPSBUX00111

Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX00111 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

HP-UX Update for Ignite-UX HPSBUX01219

Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX01219 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

HP-UX Update for the Ignite-UX or the DynRootDisk (DRD) get_system_info Command HPSBUX02249

Check for the Version of the Ignite-UX or the DynRootDisk DRD getsysteminfo Command OpenVAS Vulnerability Test HP-UX Update for the Ignite-UX or the DynRootDisk DRD getsysteminfo Command HPSBUX02249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

HP-UX Update for the Ignite-UX or the DynRootDisk (DRD) get_system_info Command HPSBUX02249

Check for the Version of the Ignite-UX or the DynRootDisk DRD getsysteminfo Command OpenVAS Vulnerability Test HP-UX Update for the Ignite-UX or the DynRootDisk DRD getsysteminfo Command HPSBUX02249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2008-6182

SQL injection vulnerability in the Ignite Gallery comignitegallery component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php...

Sql injection

SQL injection vulnerability in the Ignite Gallery comignitegallery component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php...

CVE-2008-6182

SQL injection vulnerability in the Ignite Gallery comignitegallery component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php...

CVE-2008-6182

CVE-2008-6182 affects the Ignite Gallery (com_ignitegallery) component for Joomla!, versions 0.8.0–0.8.3. The vulnerability is a SQL injection via the gallery parameter in a view action to index.php, caused by improper sanitization of user-supplied input. This allows remote attackers to execute a...

CVE-2008-6182: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Ignite Gallery comignitegallery component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...

CVE-2009-0497

Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...

Directory traversal

Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...

CVE-2009-0497

Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...

CVE-2009-0497

CVE-2009-0497 is an Openfire vulnerability (Openfire 3.6.2 and affected builds) where the log.jsp component fails to validate the log parameter, allowing a remote attacker to perform a directory traversal (via ..) and read arbitrary files on the server. The issue is caused by improper input valid...

CVE-2009-0496

Openfire (Ignite Realtime) versions prior to 3.6.3 are affected by multiple input-validation vulnerabilities (CVE-2009-0496 among others) in several .jsp pages, which could allow remote attackers to inject XSS and potentially upload a malicious plugin to achieve arbitrary code execution. The Gent...

CVE-2009-0496

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...

CVE-2009-0496

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...