6462 matches found
[SA19383] PHP "html_entity_decode()" Information Disclosure Vulnerability
TITLE: PHP "htmlentitydecode" Information Disclosure Vulnerability SECUNIA ADVISORY ID: SA19383 VERIFY ADVISORY: http://secunia.com/advisories/19383/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: PHP 4.3.x http://secunia.com/product/922/ PHP 4.4.x...
Plume CMS <= 1.0.2 Remote File Inclusion Vulnerability
The remote host is running a PHP application that is prone to local and remote file inclusion attacks. Description : The system is running Plume CMS a simple but powerful content management system. The version installed does not sanitize user input in the 'PXconfigmanagerpath' parameter in the...
Vtiger < 4.5 Alpha 2 Multiple Vulnerabilities - Active Check
Vtiger is prone to arbitrary code execution, directory traversal, SQL injection SQLi allowing authentication bypass and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...
[DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-002 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-002 Project: Drupal core Date: 2006-03-13 Security risk: less critical...
[DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-004 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-004 Project: Drupal core Date: 2006-03-13 Security risk: moderately...
Microsoft Office Routing Slip Processing Remote Buffer Overflow Vulnerability
Description Microsoft Office is prone to a remote buffer-overflow vulnerability. This vulnerability occurs when the application handles a specially crafted document. A successful attack can result in a remote compromise in the context of an affected user. Update: This issue is known to be exploit...
DEBIAN-CVE-2006-1165
Cross-site scripting XSS vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors relating to "handling EXIF data."...
[SA19023] PwsPHP "sondage" Module SQL Injection Vulnerability
TITLE: PwsPHP "sondage" Module SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19023 VERIFY ADVISORY: http://secunia.com/advisories/19023/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: PwsPHP 1.x...
Mozilla Thunderbird 1.5 - Address Book Import Remote Denial of Service
source: https://www.securityfocus.com/bid/16716/info Mozilla Thunderbird is prone to a remote denial-of-service vulnerability. The issue presents itself when the application handles a specially crafted address book file. Mozilla Thunderbird 1.5 is reportedly affected by this issue. Other versions...
VCardLITE-2.4.txt
=========================================================== Title: Vcard Lite Remote Vulnerabilitie Vulnerability discovery: Disruptor Date: 11/02/2006 Severity: Remote Users Can Execute Arbitrary Code. Affected version: . ------------------------------------------------------------- Fix 1-Remove...
FTGate <= 4.4.002 Multiple Remote Vulnerabilities (OF, FS, XSS)
The remote host appears to be running a version of FTGate, a commercial groupware mail server for Windows from FTGate Technology Ltd. The web server used to administer FTGate on the remote host fails to sanitize input to the 'href' parameter of the 'index.fts' script before using it to generate...
[SECURITY] [DSA 909-1] New horde3 packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 909-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...
exophpdesk_advisory.txt
=========================================================== ============================================================ Title: ExoPHPDesk Multiple Remote Vulnerabilities Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 15/11/2005 Severity: High. Remote Users...
[SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 899-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2005 http://www.debian.org/security/faq -...
PT-2005-4372 · Mambo · Mambo
Name of the Vulnerable Software and Affected Versions: Mambo versions 4.5.2 through 4.5.2.3 Description: The issue allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error. Recommendations: For Mambo versions 4.5.2 through...
Xeneo Web Server 2.2.9.0 DoS
Requesting an overly long URL starting with an interrogation mark as in /?AAAAA....AAAA crashes the remote server possibly Xeneo Web Server. OpenVAS Vulnerability Test $Id: XeneoWebServer2.2.9.0DoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Xeneo Web Server 2.2.9.0 DoS Authors: BEKRAR...
VisualRoute Web Server Detection
We detected the remote web server as being a VisualRoute web server. This server allows attackers to perform a traceroute to a third party's hosts without revealing themselves to the target of the traceroute. OpenVAS Vulnerability Test $Id: visualrouteserverdetect.nasl 5676 2017-03-22 16:29:37Z c...
EFTP installation directory disclosure
The remote FTP server can be used to determine the installation directory by sending a request on an unexisting file. An attacker may use this flaw to gain more knowledge about this host, such as its filesystem layout. OpenVAS Vulnerability Test $Id: eftprootdisclosure.nasl 8023 2017-12-07...
Boa file retrieval
The remote Boa server allows an attacker to read arbitrary files on the remote web server, prefixing the pathname of the file with hex-encoded ../../.. Example: GET /%2e%2e/%2e%2e/%2e%2e/etc/passwd will return /etc/passwd. OpenVAS Vulnerability Test $Id: httpdboa.nasl 8023 2017-12-07 08:36:26Z...