[SECURITY] Fedora 22 Update: php-twig-1.20.0-1.fc22

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

DEBIAN-CVE-2015-1159

Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...

CVE-2015-1159

Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...

CVE-2015-1159

Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...

CVE-2015-1159

CVE-2015-1159 is a cross-site scripting (XSS) flaw in the CUPS web templating engine. The vulnerability exists in the cgi_puts path (cgi-bin/template.c) and allows an attacker to inject arbitrary script/HTML via the QUERY parameter to the help/ page, if the server runs the affected template engin...

UBUNTU-CVE-2015-1159

Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...

CVE-2015-1159

Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...

PT-2015-1420

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 2.0.3 Description The issue is related to a cross-site scripting XSS vulnerability in the template engine of the CUPS printing server. This vulnerability allows remote attackers to inject arbitrary web script or HTML via...

Jinja2: Multiple vulnerabilities

Background Jinja2 is a template engine written in pure Python. Description Multiple vulnerabilities have been discovered in Jinja2. Please review the CVE identifiers referenced below for details. Impact A local attacker could gain escalated privileges via a specially crafted cache file or...

PT-2017-5873

Name of the Vulnerable Software and Affected Versions: ansible versions prior to 1.6.6 Description: The issue allows remote authenticated users to execute arbitrary commands. This is possible because the user module in ansible can pass unfiltered input from variables through the jinja 2 template...

USN-2301-1: Jinja2 vulnerabilities

It was discovered that Jinja2 incorrectly handled temporary cache files and directories. A local attacker could use this issue to possibly gain privileges...

wb news (webmobo) 2.3.3 - Stored XSS

No description provided by source. Title: WB News Webmobo 2.3.3 Stored XSS Vendor: http://www.webmobo.org/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability44.htm...

DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php)

No description provided by source. DynPG CMS v4.1.0 Multiple Vulnerability fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \...

[SECURITY] Fedora 20 Update: python-jinja2-2.7.3-1.fc20

Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. If you have any exposure to other text-based template languages, such as Smarty or Django, you should feel right at home with...

[SECURITY] Fedora 19 Update: python-jinja2-2.6-7.fc19

Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. If you have any exposure to other text-based template languages, such as Smarty or Django, you should feel right at home with...

Mandriva Linux Security Advisory : python-jinja2 (MDVSA-2014:096)

Updated python-jinja2 packages fix security vulnerability : Jinja2, a template engine written in pure python, was found to use /tmp as a default directory for jinja2.bccache.FileSystemBytecodeCache, which is insecure because the /tmp directory is world-writable and the filenames used like...

qEngine CMS 6.0.0 Remote Code Execution Vulnerability

qEngine CMS version 6.0.0 suffers from a remote code execution vulnerability. qEngine CMS 6.0.0 Remote Code Execution Vendor: C97net Product web page: http://www.c97.net Affected version: 6.0.0 and 4.1.6 Summary: qEngine qE is a lightweight, fast, yet feature packed CMS script to help you buildin...

ecshop最新修复的模板引擎还能执行任意代码获取webshell

简要描述： ecshop最新修复的模板引擎，是不允许在模板中执行php代码的。 但是检查不够严。 详细说明： 漏洞证明： 红框中是利用的方法及修复方法...

Fedora Update for php-twig-Twig FEDORA-2013-6107

Check for the Version of php-twig-Twig OpenVAS Vulnerability Test Fedora Update for php-twig-Twig FEDORA-2013-6107 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-twig-Twig FEDORA-2013-6114

Check for the Version of php-twig-Twig OpenVAS Vulnerability Test Fedora Update for php-twig-Twig FEDORA-2013-6114 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...