FreeBSD Ports: redmine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Redmine SCM Repository 0.9.x/1.0.x - Arbitrary Command Execution (Metasploit)

$Id: redminescmexec.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Redmine remote code execution vulnerability-vulnerability warning-the black bar safety net

Redmine is based on the ROR framework for the development of a cross-platform project management system, project management system of the rising star. Redmine remote code execution vulnerability exists that could lead an attacker to remotely execute arbitrary code. +info: joernchen...

Redmine SCM Repository Arbitrary Command Execution

$Id: redminescmexec.rb 11414 2010-12-25 14:43:13Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FreeBSD : redmine -- multiple vulnerabilities (584c506d-0e98-11e0-b59b-0050569b2d21)

Jean-Philippe Lang reports : This release also fixes 3 security issues reported by joernchen of Phenoelit : - logged in users may be able to access private data affected versions: 1.0.x - persistent XSS vulnerability in textile formatter affected versions: all previous releases - remote command...

redmine -- multiple vulnerabilities

Jean-Philippe Lang reports: This release also fixes 3 security issues reported by joernchen of Phenoelit: logged in users may be able to access private data affected versions: 1.0.x persistent XSS vulnerability in textile formatter affected versions: all previous releases remote command execution...

Redmine SCM Repository Arbitrary Command Execution

This module exploits an arbitrary command execution vulnerability in the Redmine repository controller. The flaw is triggered when a rev parameter is passed to the command line of the SCM tool without adequate filtering. Module Options msf use exploit/unix/webapp/redmine/scmexec msf...

Redmine SCM Repository - Arbitrary Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Redmine SCM Repository Arbitrary Command Execution', 'Description' = %q This module exploits an arbitrary command execution...

FreeBSD Ports: redmine

The remote host is missing an update to the system as announced in the referenced advisory. VID ba61ce15-8a7b-11df-87ec-0050569b2d21 OpenVAS Vulnerability Test $ Description: Auto generated from VID ba61ce15-8a7b-11df-87ec-0050569b2d21 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: redmine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : redmine -- multiple vulnerabilities (ba61ce15-8a7b-11df-87ec-0050569b2d21)

Eric Davis reports : This security release addresses some security vulnerabilities found in the advanced subversion integration module Redmine.pm perl script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBS...

redmine -- multiple vulnerabilities

Eric Davis reports: This security release addresses some security vulnerabilities found in the advanced subversion integration module Redmine.pm perl script...

FreeBSD Ports: redmine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: redmine

The remote host is missing an update to the system as announced in the referenced advisory. VID fcc39d22-5777-11df-bf33-001a92771ec2 OpenVAS Vulnerability Test $ Description: Auto generated from VID fcc39d22-5777-11df-bf33-001a92771ec2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD : redmine -- multiple vulnerabilities (fcc39d22-5777-11df-bf33-001a92771ec2)

The Redmine release announcement reports that several cross side scripting vulnerabilities and a potential data disclosure vulnerability have been fixed in the latest release. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

redmine -- multiple vulnerabilities

The Redmine release announcement reports that several cross side scripting vulnerabilities and a potential data disclosure vulnerability have been fixed in the latest release...

Ruby on Rails 'protect_from_forgery' Cross Site Request Forgery Vuln

Exploit for unknown platform in category web applications ============================================================================= Ruby on Rails 'protectfromforgery' Cross Site Request Forgery Vulnerability =============================================================================...

[Backports-security-announce] Security Update for redmine

Jan Wagner uploaded a new package for redmine which fixed the following security problem: CVE-2009-44592 and Debian Bug 5639403 It was discovered that Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct...

[Backports-security-announce] Security Update for redmine

Jan Wagner uploaded a new package for redmine which fixed the following security problem: CVE-2009-44592 and Debian Bug 5639403 It was discovered that Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct...

DEBIAN-CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...