109 matches found
Debian Security Advisory DSA 1389-1 (zoph)
The remote host is missing an update to zoph announced via advisory DSA 1389-1. OpenVAS Vulnerability Test $Id: deb13891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1389-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian DSA-1389-2 : zoph - missing input sanitising
It was discovered that zoph, a web-based photo management system, performs insufficient input sanitising, which allows SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1389...
[SECURITY] [DSA 1389-2] New zoph packages fix SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 1389-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 24th, 2007 http://www.debian.org/security/faq -...
DSA-1389-2 zoph - SQL injection
Bulletin has no description...
[SECURITY] [DSA 1389-1] New zoph packages fix SQL injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1389-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 18th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1389-1] New zoph packages fix SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 1389-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 18th, 2007 http://www.debian.org/security/faq -...
DSA-1389-1 zoph - SQL injection
Bulletin has no description...
CVE-2007-3905
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...
DEBIAN-CVE-2007-3905
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...
CVE-2007-3905
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...
CVE-2007-3905
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...
Sql injection
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...
CVE-2007-3905
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...
CVE-2007-3905
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the order parameter to 1 photos.php and 2 editphotos.php...
CVE-2007-3905
CVE-2007-3905 concerns the web-based photo management system zoph , where the vulnerability arises from insufficient input sanitising that permits SQL injection. Debian and OpenVAS advisories (DSA-1389-1/2) confirm a remote SQL injection flaw in zoph, with fixed releases including 0.3.3-12sarge3 ...
Zoph _Order SQL注入漏洞
Zoph是一款WEB应用程序。 Zoph不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于多个脚本对用户提交的'order'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 Zoph Zoph 0.7 目前没有解决方案提供： http://www.nother.net/zoph/...
Debian DSA-989-1 : zoph - SQL injection
Neil McBride discovered that Zoph, a web-based photo management system performs insufficient sanitising for input passed to photo searches, which may lead to the execution of SQL commands through a SQL injection attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
[SECURITY] [DSA 989-1] New zoph packages fix SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 989-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 9th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 989-1] New zoph packages fix SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 989-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 9th, 2006 http://www.debian.org/security/faq -...