SA-CONTRIB-2010-034 - Internationalization - Cross Site Scripting

The Internationalization module enables translation of user defined strings using Drupal's locale interface. Some of these user defined strings have Input formats associated with them and some of the strings used for translating blocks were not properly filtered before display. Additionally all...

SA-CONTRIB-2010-022 - Internationalization - Arbitrary code execution

The Internationalization module enables translation of user defined strings using Drupal's locale interface. Some of these user defined strings have Input formats associated with them. As translators can translate texts before they go through the Input filters, using some filters like the PHP...

MediaWiki Language Option PHP Code Execution (CVE-2005-4031)

MediaWiki is a web-based enterprise collaboration platform developed in the PHP scripting language. The software is a set of CGI programs that are loaded and executed by an HTTP server. It typically runs as a document management system, or a knowledge base. The web content of a MediaWiki...

[SECURITY] Fedora 10 Update: kde-l10n-4.3.1-2.fc10

Internationalization support for KDE...

[SECURITY] Fedora 11 Update: kde-l10n-4.3.1-2.fc11

Internationalization support for KDE...

Fedora Update for kde-i18n FEDORA-2007-2985

Check for the Version of kde-i18n OpenVAS Vulnerability Test Fedora Update for kde-i18n FEDORA-2007-2985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for kdevelop FEDORA-2007-2985

Check for the Version of kdevelop OpenVAS Vulnerability Test Fedora Update for kdevelop FEDORA-2007-2985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Design/Logic Flaw

Unspecified vulnerability in Internationalization i18n Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with "translate node" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors...

CVE-2009-0382

CVE-2009-0382 involves Drupal's Internationalization (i18n) Translation 5.x before 5.x-2.5. The vulnerability allows remote attackers who have the translate node permission to bypass intended access restrictions and read unpublished nodes via unspecified vectors. The connected documents confirm t...

CVE-2009-0382

Unspecified vulnerability in Internationalization i18n Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with "translate node" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors...

USN-677-2: OpenOffice.org Internationalization update

USN-677-1 fixed vulnerabilities in OpenOffice.org. The changes required that openoffice.org-l10n also be updated for the new version in Ubuntu 8.04 LTS. Original advisory details: Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Internationalization i18n Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Drupal modules 1 Internationalization i18n 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and 2 Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecifie...

CVE-2008-1976

Multiple cross-site scripting XSS vulnerabilities in the Drupal modules 1 Internationalization i18n 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and 2 Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecifie...

CVE-2008-1976

CVE-2008-1976 describes multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1; and Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11. The flaws allow remote attackers to inject arbitrar...

CVE-2008-1977

CVE-2008-1977 describes a CSRF vulnerability in the Drupal Internationalization (i18n) module. Affected: Drupal i18n module versions 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1. The issue allows remote attackers to change node translation relationships via unspecified vectors. T...

SA-2008-028 - Internationalization and Localizer - Cross site scripting

The Internationalization i18n and Localizer modules add multi-lingual capabilities to Drupal sites. They provide control over a site's user interface language, the ability to enter and control content in multiple languages, and can detect the browser language. Several values are displayed without...

[SECURITY] Fedora 7 Update: kdevelop-3.5.0-4.fc7

The KDevelop Integrated Development Environment provides many features that developers need as well as providing a unified interface to programs like gdb, the C/C++ compiler, and make. KDevelop manages or provides: All development tools needed for C++ programming like Compiler, Linker, automake a...

[SECURITY] Fedora 7 Update: kde-i18n-3.5.8-1.fc7

Internationalization support for KDE...

DEBIAN-CVE-2007-5712

The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...