PHP-CGI query string parameter vulnerability

Overview PHP-CGI-based setups contain a vulnerability when parsing query string parameters from php files. Description According to PHP's website, "PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML." When PHP is use...

PT-2012-1249 · Netfilter +3 · Iptables +3

Name of the Vulnerable Software and Affected Versions: iptables versions through 1.4.21 Description: The issue is related to insufficient input validation in the extensions/libxt tcp.c component of the iptables interface, which could allow a remote attacker to access confidential data, compromise...

httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix

The modproxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to...

Joomla Rule Local File Inclusion

Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

PT-2011-5168 · Php · Phpids

Name of the Vulnerable Software and Affected Versions: PHPIDS versions prior to 0.7 Description: The issue allows remote attackers to bypass rulesets and add PHP sequences to a file due to improper implementation of Regular Expression Denial of Service ReDoS filters. Recommendations: For versions...

DEBIAN-CVE-2011-4317

The modproxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which...

CVE-2011-1371

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...

Cross site scripting

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...

CVE-2011-1371

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...

CVE-2011-1371

CVE-2011-1371 is described as a cross-site scripting (XSS) vulnerability in IBM WebSphere ILOG Rule Team Server 7.1.1, specifically affecting the file content/error.jsp. Publicly provided descriptions indicate two related vectors: (1) via vectors that trigger an Unknown Error document (the CVE-20...

PT-2011-3090

Name of the Vulnerable Software and Affected Versions IBM WebSphere ILOG Rule Team Server version 7.1.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This occurs via vectors that trigger an Unknown Error document...

CVE-2011-1371: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...

IBM WebSphere ILOG Rule Team Server未明跨站脚本漏洞

Bugtraq ID: 50368 IBM WebSphere ILOG是一款业务规则管理系统。IBM WebSphere ILOG Rule Team Server是一个基于Web的规则管理和授权环境，它允许业务用户查看、创建和修改规则。 IBM WebSphere ILOG Rule Team Server content/error.jsp存在一个未明跨站脚本漏洞，允许攻击者构建恶意链接，诱使用户解析，可获得敏感信息或劫持用户会话。 IBM WebSphere ILOG Rule Team Server 7.1.1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

CVE-2011-4171

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp...

Cross site scripting

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp...

CVE-2011-4171

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp...

CVE-2011-4171

CVE-2011-4171 describes a cross-site scripting (XSS) vulnerability in IBM WebSphere ILOG Rule Team Server 7.1.1. The flaw arises in content/error.jsp and can be triggered through the project parameter to teamserver/faces/home.jsp. The available records do not specify the exact root cause beyond a...

CVE-2011-4171: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp...

PT-2011-4877

Name of the Vulnerable Software and Affected Versions IBM WebSphere ILOG Rule Team Server version 7.1.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the project parameter to the "teamserver/faces/home.jsp" endpoint...

John the Ripper 1.7.8-jumbo-7 Released

John the Ripper 1.7.8-jumbo-7 Released Change Log : Support for encrypted pkzip archives has been added, testing millions of candidate passwords per second. JimF This is in addition to WinZip/AES archives, support for which was added in prior -jumbo updates. Support for Mac OS X 10.7 Lion salted...