[SECURITY] Fedora 18 Update: sticky-notes-0.3.09062012.4-10.fc18

Sticky notes is a free and open source paste-bin application...

Fedora Update for sticky-notes FEDORA-2012-9739

Check for the Version of sticky-notes OpenVAS Vulnerability Test Fedora Update for sticky-notes FEDORA-2012-9739 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for sticky-notes FEDORA-2012-9739

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 17 Update: kdepim-4.8.4-4.fc17

KDE PIM Personal Information Manager applications, including: akregator: feed aggregator blogilo: blogging application, focused on simplicity and usability kmail: email client knode: newsreader knotes: sticky notes for the desktop kontact: integrated PIM management korganizer: journal,...

CVE-2012-3999

Cross-site scripting XSS vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2012-3997

Multiple cross-site scripting XSS vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web script or HTML via the 1 pasteuser or 2 pastelang parameter to a list.php or b show.php...

CVE-2012-3998

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the 1 paste id in admin/modules/modpastes.php or 2 show.php, 3 user id to admin/modules/modusers.php, 4 project to list.php, or 5 session id to show.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web script or HTML via the 1 pasteuser or 2 pastelang parameter to a list.php or b show.php...

Sql injection

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the 1 paste id in admin/modules/modpastes.php or 2 show.php, 3 user id to admin/modules/modusers.php, 4 project to list.php, or 5 session id to show.php...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2012-3998

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the 1 paste id in admin/modules/modpastes.php or 2 show.php, 3 user id to admin/modules/modusers.php, 4 project to list.php, or 5 session id to show.php...

CVE-2012-3999

Cross-site scripting XSS vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2012-3997

CVE-2012-3997 affects Sticky Notes prior to 0.2.27052012.5, where XSS can be triggered via the (1) paste_user or (2) paste_lang parameters to either list.php or show.php. The vulnerability allows remote attackers to inject arbitrary web script/HTML, with no network authentication required, and ca...

CVE-2012-3998

CVE-2012-3998 covers multiple SQL injection vulnerabilities in Sticky Notes prior to 0.2.27052012.5. The affected components include admin/modules/mod_pastes.php (paste id), show.php, admin/modules/mod_users.php (user id), list.php (project), and show.php (session id). The root cause is improper ...

CVE-2012-3999

CVE-2012-3999 describes a cross-site scripting (XSS) vulnerability in the Sticky Notes application’s admin/login.php. The issue affects Sticky Notes 0.3.09062012.4 and earlier, allowing an attacker to inject arbitrary script or HTML through the username parameter. The provided sources do not incl...

CVE-2012-3997

Multiple cross-site scripting XSS vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web script or HTML via the 1 pasteuser or 2 pastelang parameter to a list.php or b show.php...

PT-2012-5125

Name of the Vulnerable Software and Affected Versions Sticky Notes versions prior to 0.2.27052012.5 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the paste user or paste lang parameter to "list.php" or "show.php" API endpoints...

PT-2012-5127

Name of the Vulnerable Software and Affected Versions Sticky Notes versions 0.3.09062012.4 and earlier Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the username parameter in the "admin/login.php" endpoint...

CVE-2012-3997: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web script or HTML via the 1 pasteuser or 2 pastelang parameter to a list.php or b show.php...

CVE-2012-3998: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the 1 paste id in admin/modules/modpastes.php or 2 show.php, 3 user id to admin/modules/modusers.php, 4 project to list.php, or 5 session id to show.php...