1252 matches found
Debian Security Advisory DSA 2349-1 (spip)
The remote host is missing an update to spip announced via advisory DSA 2349-1. OpenVAS Vulnerability Test $Id: deb23491.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2349-1 spip Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian: Security Advisory (DSA-2349-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2349-1] spip security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2349-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 19, 2011 http://www.debian.org/security/faq -...
Debian DSA-2349-1 : spip - several vulnerabilities
Two vulnerabilities have been found in SPIP, a website engine for publishing, which allow privilege escalation to site administrator privileges and cross-site scripting. The oldstable distribution lenny doesn't include spip. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...
[SECURITY] [DSA 2349-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2349-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 19, 2011 http://www.debian.org/security/faq -...
DSA-2349-1 spip - several
Bulletin has no description...
Installation Path Disclosure Weakness in SPIP
High-Tech Bridge SA Security Research Lab has discovered a weakness in SPIP which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in SPIP The weakness exists due to application reveals the full path to installation directory in an...
Debian Security Advisory DSA 2229-1 (spip)
The remote host is missing an update to spip announced via advisory DSA 2229-1. OpenVAS Vulnerability Test $Id: deb22291.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2229-1 spip Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2229-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2229-1 : spip - programming error
A vulnerability has been found in SPIP, a website engine for publishing, which allows a malicious registered author to disconnect the website from its database, resulting in denial of service. The oldstable distribution lenny doesn't include spip. %NASLMINLEVEL 70300 C Tenable Network Security,...
[SECURITY] [DSA 2229-1] spip security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2229-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 01, 2011 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2229-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2229-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 01, 2011 http://www.debian.org/security/faq -...
DSA-2229-1 spip - programming error
Bulletin has no description...
SPIP断开数据库未明远程拒绝服务漏洞
Bugtraq ID: 47302 SPIP是一基于Web的内容发布系统。 SPIP存在为一个未明安全漏洞,允许攻击者利用此漏洞使WEB站点与数据库断开。 SPIP SPIP 2.1 SPIP SPIP 2.0.9 SPIP SPIP 2.0.7 SPIP SPIP 2.0.2 SPIP SPIP 2.1.9 SPIP SPIP 2.1.8 SPIP SPIP 2.1.7 SPIP SPIP 2.0.14 SPIP SPIP 2.0 RC1 SPIP SPIP 2.0 厂商解决方案 SPIP 2.1.10已经修复此漏洞,建议用户下载使用: http://www.spip.net/en...
SPIP 2.1 - var_login Cross-Site Scripting
SPIP 2.1 - varlogin Cross-Site Scripting source: https://www.securityfocus.com/bid/42060/info SPIP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
SPIP 2.1 - 'var_login' Cross-Site Scripting
source: https://www.securityfocus.com/bid/42060/info SPIP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
SPIP CMS (XSS/URL Redirecting) Multiple Vulnerability
Exploit for php platform in category web applications ===================================================== SPIP CMS XSS/URL Redirecting Multiple Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...
CVE-2009-3041
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for 1 ecrire/exec/install.php and 2 ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009...
CVE-2009-3041
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for 1 ecrire/exec/install.php and 2 ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009...
DEBIAN-CVE-2009-3041
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for 1 ecrire/exec/install.php and 2 ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009...