10041 matches found
[SECURITY] Fedora 21 Update: php-5.6.6-1.fc21
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
UBUNTU-CVE-2012-6687
FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...
Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2501-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2501-1 advisory. Stefan Esser discovered that PHP incorrectly handled unserializing objects. A remote attacker could use this issue to cause PHP to crash, resulting in a...
SixApart MovableType < 5.2.12 - Storable Perl Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'SixApart MovableType Storable Perl Code Execution', 'Description' = %q This module exploits a serialization flaw in MovableType...
SixApart MovableType Storable Perl Code Execution
This module exploits a serialization flaw in MovableType before 5.2.12 to execute arbitrary code. The default nondestructive mode depends on the target server having the Object::MultiType and DateTime Perl modules installed in Perl's @INC paths. The destructive mode of operation uses only require...
Bugzilla < 4.0.15 / 4.2.11 / 4.4.6 / 4.5.6 Multiple Vulnerabilities
Binary data 8606.prm...
CVE-2015-0871
Cross-site scripting XSS vulnerability in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-0871
CVE-2015-0871 is a cross-site scripting vulnerability in the Perl CGI-based shiromuku(u1)GUESTBOOK bulletin board, affected in version 1.62 and earlier. The underlying issue allows an attacker to inject arbitrary script/HTML, potentially leading to arbitrary script execution in a user’s browser. ...
CVE-2015-0871
Cross-site scripting XSS vulnerability in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Fedora 20 : php-5.5.21-1.fc20 (2015-1101)
22 Jan 2014, PHP 5.5.21 Core : - Upgraded cryptblowfish to version 1.3. Leigh - Fixed bug 60704 unlink bug with some files path. - Fixed bug 65419 Inside trait, self::class != CLASS. Julien - Fixed bug 65576 Constructor from trait conflicts with inherited constructor. dunglas at gmail dot com -...
OWASP SSL audit: O-Saft
O-Saft is an easy to use tool to show informations about SSL certificate and tests the SSL connection according given list of ciphers and various SSL configurations. It’s designed to be used by penetration testers, security auditors or server administrators. The idea is to show the important...
Atmail Webmail Unsupported Version Detection
According to its self-reported version number, the version of Atmail Webmail on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL...
JVN#17480391: shiromuku(u1)GUESTBOOK vulnerable to cross-site scripting
shiromukuu1GUESTBOOK from Perl CGI's By Mrs. Shiromuku is a bulletin board software. shiromukuu1GUESTBOOK contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2015-0868
Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromukubu2BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file...
Unrestricted file upload
Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromukubu2BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file...
CVE-2015-0868
CVE-2015-0868 is an unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS, affecting versions up to and including 2.90 (2.91 fixes referenced by sources). The flaw allows a remote attacker to upload an executable file and potentially execute arbitrary code on the ser...
CVE-2015-0868
Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromukubu2BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file...
MGASA-2015-0040 Updated php packages fix security vulnerabilities
Updated php and libgd packages fix security vulnerabilities: Double free vulnerability in the zendtshashgracefuldestroy function in zendtshash.c in the Zend Engine in PHP before 5.5.21 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vecto...