CVE-2012-0797

The CVE-2012-0797 issue affects Moodle webservices authentication: remote authenticated users could bypass the deleted status and continue using a server via a token. Affected versions are Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1. The root cause is improper handling o...

Liferay 6.1 json webservices are subject to cross-site request forgery attacks

Liferay 6.1 json webservices are subject to cross-site request forgery attacks Description: Liferay Portal is an enterprise portal written in Java If a user is currently logged in to the portal or has ticked the remember me box then with a little help of social engineering like sending a link via...

Liferay 6.1 can be compromised in its default configuration

Liferay 6.1 can be compromised in its default configuration Description: Liferay Portal is an enterprise portal written in Java By utilizing the json webservices exposed by the platform you can register a new user with any role in the system, including the built in administrator role. The problem...

CVE-2012-1079

Unspecified vulnerability in the Webservices for TYPO3 typo3webservice extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in the Webservices for TYPO3 typo3webservice extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2012-1079

Unspecified vulnerability in the Webservices for TYPO3 typo3webservice extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2012-1079

CVE-2012-1079 affects the TYPO3 Webservices extension (typo3_webservice) for TYPO3, vulnerable versions before 0.3.8. Remote authenticated users could execute arbitrary code via unknown vectors due to the underlying issue in that extension. No explicit exploit details are provided in the document...

Fedora Update for php-ZendFramework FEDORA-2011-7388

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2011-7388 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2010-0774

The 1 JAX-RPC WS-Security 1.0 and 2 JAX-WS runtime implementations in IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 do not properly handle WebServices PKCS7 and PKIPath tokens, which allows remote attackers to bypass intended access...

Solaris 5.10 (x86) : 125407-01

Webservices, SunOS 5.9 5.10 5.9x86 5.10x86: patch. Date this patch was last updated by Sun : Sep/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ...

Solaris 5.9 (x86) : 125407-01

Webservices, SunOS 5.9 5.10 5.9x86 5.10x86: patch. Date this patch was last updated by Sun : Sep/05/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if...

Geeklog SEC_authenticate()函数SQL注入漏洞

BUGTRAQ ID: 34456 Geeklog是一个免费的、开放源码的Web应用程序。它可以使用户创建一个虚拟的社区，可以管理用户，张贴文章等。Geeklog采用PHP实现，以MySQL为后台数据库。 Geeklog的index.php模块中的SECauthenticate函数没有正确的验证用户所提交的PHPAUTHUSER和 REMOTEUSER变量参数，远程攻击者可以通过提交恶意查询请求执行SQL注入攻击。以下是/publichtml/webservices /atom/index.php文件中34-53行的有漏洞代码段： ... requireonce...

openSUSE 10 Security Update : ruby (ruby-2219)

A denial of service problem in the CGI multipart parsing of 'ruby' was fixed, which could have allowed remote attackers to affect a denial of service attack against ruby based webservices. CVE-2006-5467 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Solaris 5.10 (sparc) : 125407-01

Webservices, SunOS 5.9 5.10 5.9x86 5.10x86: patch. Date this patch was last updated by Sun : Sep/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ...

Solaris 9 (sparc) : 125407-01

Webservices 2.1: patch for Solaris 9 9x86 10 10x86. Date this patch was last updated by Sun : Sep/05/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...