Fedora Update for xfce4-weather-plugin FEDORA-2007-4385

Check for the Version of xfce4-weather-plugin OpenVAS Vulnerability Test Fedora Update for xfce4-weather-plugin FEDORA-2007-4385 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2008-5770

Cross-site scripting XSS vulnerability in config/makeconfig.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5771

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

Directory traversal

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in config/makeconfig.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-5771

Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

CVE-2008-5770

The CVE-2008-5770 entry describes a cross-site scripting (XSS) vulnerability in PHP Weather 2.2.2, affecting the file config/make_config.php. The root cause is improper handling of PATH_INFO, enabling remote attackers to inject arbitrary web script or HTML. The affected product is PHP Weather 2.2...

CVE-2008-5771

CVE-2008-5771 describes a directory traversal vulnerability in test.php of PHP Weather 2.2.2. The language parameter can be manipulated to trigger directory traversal, enabling remote attackers to include and execute arbitrary local files. This represents a potential server-side impact on affecte...

PHP Weather 2.2.2 (LFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl:...

PHP Weather 2.2.2 LFI / XSS

Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl: www.site.com/path/test.php?metar=&language=Lfi%00...

PHP weather 2.2.2 - Local File Inclusion Cross-Site Scripting

PHP weather 2.2.2 - Local File Inclusion Cross-Site Scripting Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl:...

PHP Weather 2.2.2 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== PHP Weather 2.2.2 LFI/XSS Multiple Remote Vulnerabilities =========================================================== Lfi/xss script: phpweather-2.2.2 download...

PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting

Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl: www.site.com/path/test.php?metar=&language=Lfi%00...

XSS in PHP-Nuke (eWeather module)

//////////XSS in PHP-Nuke eWeather module PHP-Nuke http://phpnuke.org: PHP-Nuke is a news automated system specially designed to be used in Intranets and Internet. The Administrator has total control of his web site, registered users, and he will have in the hand a powerful assembly of tools to...

Unfixed XSS vulnerability at www.nordicweather.net

Security researcher F3nix, has submitted on 31/01/2008 a cross-site-scripting XSS vulnerability affecting www.nordicweather.net, which at the time of submission ranked 1094493 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/02/2008. It is...

[SECURITY] Fedora 8 Update: xfce4-weather-plugin-0.6.2-2.fc8

A weather plugin for the Xfce panel. It shows the current temperature and weather condition, using weather data provided by xoap.weather.com...

[SECURITY] Fedora 7 Update: xfce4-weather-plugin-0.6.2-2.fc7

A weather plugin for the Xfce panel. It shows the current temperature and weather condition, using weather data provided by xoap.weather.com...

Directory traversal

Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...

CVE-2007-5674

Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...

CVE-2007-5674

Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...