33 matches found
Fedora 29 : php-pear-CAS (2018-6d62140b89)
Version 1.3.6 Security Fixes: - Fix XSS in proxy mode 271 Joachim Fritschi Bug Fixes: - Fix bad condition 252 Brice Vercoustre - Hash ticket strings to generate valid-length session-ids 224, 244, 248 Adam Franco - Fix 'phpCAS' class capitalization in code 273, 277 phy25 Improvement: - Remove...
MGASA-2018-0067 Updated dokuwiki package fixes security vulnerability
DokuWiki through 2017-02-19b has XSS in the at parameter aka the DATEAT variable to doku.php and updated package is fixed by added patch from upstream...
mcm-market.ru XSS vulnerability
Open Bug Bounty ID: OBB-203495 Description| Value ---|--- Affected Website:| mcm-market.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
openSUSE Security Update : roundcubemail (openSUSE-2016-1205)
This update for roundcubemail to 1.1.6 fixes several issues boo1001856. These security issues were fixed : - Fix XSS issue in href attribute on area tag - Wash position:fixed style in HTML mail for better security These non-security issues were fixed : - Searching in both contacts and groups when...
Fedora 19 : Pound-2.6-8.fc19 (2014-13764)
Backport various security fixes. Note they usually are extra options that need to be enabled manually so that we won't break functionality : - CVE-2011-3389: Make it possible to deny use of 'BEAST' vulnerable ciphers - CVE-2012-4929: Disable compression to be safe from 'CRIME' - CVE-2005-2090:...
Tickets CAD 2.20G Multiple Vulnerabilities
No description provided by source. Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Ticket...
Fedora 15 : ocsinventory-1.3.3-5.fc15 (2011-15007)
Fix a XSS vulnerability ---------------------------------------------------------------------- -----= Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 14 : pootle-2.1.2-1.fc14 (2010-17000)
Update to 2.1.2 - Fix XSS on translate page - Improved monolingual support - Improved GNU style project support - New translations: Zulu, Greek, Danish, Acoli and Fulah - Completed translations: Uighur, Chinese China, Catalan, Asturian, Akan and Ganda - Various bug fixes Note that Tenable Network...
Fedora 13 : pootle-2.1.2-1.fc13 (2010-16998)
Update to 2.1.2 - Fix XSS on translate page - Improved monolingual support - Improved GNU style project support - New translations: Zulu, Greek, Danish, Acoli and Fulah - Completed translations: Uighur, Chinese China, Catalan, Asturian, Akan and Ganda - Various bug fixes Note that Tenable Network...
Fedora 11 : phpMyAdmin-3.2.0.1-1.fc11 (2009-7329)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
Fedora 8 : phpMyAdmin-3.0.1.1-1.fc8 (2008-9336)
This update by upstream to phpMyAdmin 3.0.1.1 solves CVE-2008-4775, a XSS issue in pmdpdf.php via db parameter when registerglobals is enabled. - GUI SQL error after sorting a subset - lang Catalan update - lang Russian update - import Temporary uploaded file not deleted - auth Cannot create...
Moderate: httpd security update
2.0.52-38.ent.2.0.1 - use oracle index page oracleindex.html - updated string and distro in specfile 2.0.52-38.ent.2 - add security fix for CVE-2007-6388 427236 - add security fix for modproxyftp UTF-7 XSS 427743 2.0.52-38.ent.1 - add security fixes for CVE-2007-4465, CVE-2007-5000 421611...
321soft09.txt
321soft PhP Gallery 0.9 - directory travel & XSS -------------------------------------------------------- Software: 321soft PhP Gallery Version: 0.9 Type: directory travel & XSS Date: Mai 3 01:38:04 CEST 2006 Vendor: 321soft.de Page: http://321soft.de/ Risc: Middle credits:...