903 matches found
mantis -- "view_filters_page.php" cross-site scripting vulnerability
r0t reports: Mantis contains a flaw that allows a remote cross site scripting attack. This flaw exists because input passed to "targetfield" parameter in "viewfilterspage.php" isn't properly sanitised before being returned to the user. This could allow a user to create a specially crafted URL tha...
mantis -- "view_filters_page.php" cross site scripting vulnerability
r0t reports: Mantis contains a flaw that allows a remote cross site scripting attack. This flaw exists because input passed to "targetfield" parameter in "viewfilterspage.php" is not properly sanitised before being returned to the user. This could allow a user to create a specially crafted URL th...
SugarCRM <= 4.0 beta acceptDecline.php Remote File Inclusion
SugarCRM is a Customer Relationship Manager written in PHP. The version of SugarCRM installed on the remote host does not properly sanitize user input in the 'beanFiles' parameter in the 'acceptDecline.php' file. A attacker can use this flaw to display sensitive information and to include malicio...
CVE-2005-4086
SugarCRM
OpenCA libCheckSignature function fails to properly verify the signature of certificates
Overview OpenCA may accept a signature from a certificate if the certificate's chain is trusted by the chain directory of OpenCA. Description The OpenCA PKI Development Project is a Certification Authority. A vulnerability exists in the way the libCheckSignature function compares the certificate ...
Linux news 20.11.00
Следующий шаг ядра стабильной ветки - 2.2.18pre22 Следующий шаг на пути к 2.2.19. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-19-009-04-NW-KN Linux 2.4.0-test11 Вышло очередное тестовое ядро... Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/v2.4/ AC Kernel Patch 2.2.x 2.2.18pre...
CVE-1999-0515
CVE-1999-0515 relates to an unrestricted remote trust relationship in Unix/Linux environments (eg, using + in /etc/hosts.equiv/.rhosts via rsh). Root access can be gained if a trusted host is compromised. Remediation described in sources: remove the wildcard (+) from /etc/hosts.equiv and the root...
CVE-1999-0539
Technical details about CVE-1999-0539 are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0539
A trust relationship exists between two Unix hosts...
CVE-1999-0583
There is a one-way or two-way trust relationship between Windows NT domains...
CVE-1999-0515
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv...
CVE-1999-0539
A trust relationship exists between two Unix hosts...
CVE-1999-0583
There is a one-way or two-way trust relationship between Windows NT domains...
PT-1999-1176 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: An issue has been identified where an unrestricted remote trust relationship for Unix systems has been set up. This setup can be done, for example, by using a + sign in /etc/hosts.equiv...
PT-1999-1183 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A trust relationship exists between two Unix hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
Microsoft Dynamics CRM 2015 for Outlook Update 1
Microsoft Dynamics CRM 2015 for Outlook Update 1...
CVE-2023-24203
Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameters...
CVE-2023-24204
SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...