461 matches found
CVE-2008-3100
Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...
CVE-2008-3100
Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...
CVE-2008-3359
SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...
owl-xss.txt
Cross Site Scripting XSS in Owl alert1; Workaround/Fix: Replace your owl.lib.php with the version from http://owl.cvs.sourceforge.net/checkout/owl/owl-0.90/lib/owl.lib.php Disclosure Timeline: 2008-07-27 Vendor contacted 2008-07-28 Vendor: fixed issue in cvs / no need for new stable release...
Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100
Cross Site Scripting XSS in Owl =0.95, CVE-2008-3100 References: https://vulners.com/cve/CVE-2008-3100 http://owl.sourceforge.net/ http://www.datensalat.eu/fabian/cve/CVE-2008-3100-Owl.html Description: Owl is a multi user document repository knowledgebase system for publishing files/documents on...
Owl Intranet Engine 0.95 - 'register.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30410/info Owl Intranet Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Owl cross-site scripting vulnerability
Overview Owl, an open source document management and publishing system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. As a result, web pages could be spoofed. Solution...
Owl SQL injection vulnerability
Overview Owl, an open source document management and publishing system, contains an SQL injection vulnerability. Impact A remote attacker may modify or steal the database contents. Solution None...
CVE-2006-4212
SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2006-4212
SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2006-4211
CVE-2006-4211 is an XSS vulnerability in Owl Intranet Engine (b0zz and Chris Vincent Owl Intranet Engine) 0.90 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documented by NVD as a network-accessible XSS with base score 4.3 (...
CVE-2006-4212
CVE-2006-4212 concerns an SQL injection in Owl Intranet Engine, a PHP-based document management system. The entry states that Owl Intranet Engine 0.90 and earlier is vulnerable and that remote attackers can execute arbitrary SQL commands via unspecified vectors. The connected JVN record notes the...
Owl Intranet Engine <= 0.91 Multiple Vulnerabilities
The remote host is running Owl Intranet Engine, a web-based document management system written in PHP. The version of Owl Intranet Engine on the remote host fails to sanitize input to the session id cookie before using it in a database query. Provided PHP's 'magicquotesgpc' setting is disabled, a...
JVN#01137722 Owl cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. As a result, web pages could be spoofed. Solution Products Affected Owl version 0.90 and earlier...
JVN#39103264 Owl SQL injection vulnerability
Impact A remote attacker may modify or steal the database contents. Solution Products Affected Owl version 0.90 and earlier...
CVE-2006-1149
PHP remote file inclusion vulnerability in lib/OWLAPI.php in OWL Intranet Engine 0.82, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the xrmsfileroot parameter, which is not initialized before use...
Remote file inclusion
PHP remote file inclusion vulnerability in lib/OWLAPI.php in OWL Intranet Engine 0.82, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the xrmsfileroot parameter, which is not initialized before use...
CVE-2006-1149
The CVE-2006-1149 entry applies to Owl Intranet Engine 0.82. PHP remote file inclusion arises when register_globals is on and xrms_file_root is used unsafely in lib/OWL_API.php. An unauthenticated attacker can cause arbitrary file inclusion (and potentially PHP code execution) by supplying a URL ...
CVE-2006-1149
PHP remote file inclusion vulnerability in lib/OWLAPI.php in OWL Intranet Engine 0.82, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the xrmsfileroot parameter, which is not initialized before use...
[SA19142] Owl Intranet Engine "xrms_file_root" File Inclusion Vulnerability
TITLE: Owl Intranet Engine "xrmsfileroot" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19142 VERIFY ADVISORY: http://secunia.com/advisories/19142/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Owl Intranet Engine 0.x http://secunia.com/product/1579/...