Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-1320

Malware in sbrugna...

6.8CVSS6.4AI score0.00723EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.10 views

Gentoo Security Advisory GLSA 200406-09 (net-www/horde-chora)

The remote host is missing updates announced in advisory GLSA 200406-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

0.9AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.5 views

Gentoo Security Advisory GLSA 200406-09 (net-www/horde-chora)

The remote host is missing updates announced in advisory GLSA 200406-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.13 views

Horde Chora < 1.2.2 RCE Vulnerability - Active Check

Horde Chora is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

8.2AI score
Exploits0References4
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.11 views

Chora Remote Code Execution Vulnerability

The remote server is running at least one instance of Chora version 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run arbitrary code with the permissions of the web user. OpenVAS Vulnerability Test $Id: choraremotecodeexecution.nasl 7221 2017-09-...

1.4AI score
Exploits0References3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.9 views

Chora Detection

This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a...

7.3AI score
Exploits0References1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.10 views

Chora Detection

This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. See http://www.horde.org/chora/ for more information. OpenVAS Vulnerability Test $Id:...

Exploits0
Tenable Nessus
Tenable Nessus
added 2005/07/13 12:0 a.m.13 views

FreeBSD : chora (2069)

The following package needs to be updated: chora %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScrip...

7AI score
Exploits0References1
securityvulns
securityvulns
added 2005/04/28 12:0 a.m.25 views

[SA15083] Chora Parent Frame Page Title Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Chora Parent Frame Page Title Cross-Site Scripting...

0.2AI score
Exploits0
Cvelist
Cvelist
added 2005/04/27 4:0 a.m.13 views

CVE-2005-1317

Cross-site scripting XSS vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

5.7AI score0.00723EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2005/04/26 12:0 a.m.12 views

Horde Chora common-footer.inc Page Title XSS

According to its version, the remote installation of Chora fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...

5.8AI score
Exploits0
NVD
NVD
added 2005/04/25 4:0 a.m.12 views

CVE-2005-1317

Cross-site scripting XSS vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

6.8CVSS5.7AI score0.00723EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2005/04/25 12:0 a.m.11 views

Horde Chora < 1.2.3 Parent Frame Page Title XSS

Binary data 2853.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/07/28 12:0 a.m.22 views

Horde Chora Software Detection

The remote host is running Chora, a PHP-based interface to CVS repositories from the Horde Project. This script was written by George A. Theall, . See the Nessus Scripts License for details. include"compat.inc"; if description scriptid13849; scriptversion"1.26";...

5.5AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2004/06/21 12:0 a.m.11 views

Horde Chora CVS Viewer diff Utility Arbitrary Command Execution

The remote server is running at least one instance of Chora version 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run arbitrary code with the permissions of the web user. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the...

6AI score
Exploits0References1
Gentoo Linux
Gentoo Linux
added 2004/06/15 12:0 a.m.11 views

Horde-Chora: Remote code execution

Background Chora is a PHP-based SVN/CVS repository viewer by the HORDE project. Description A vulnerability in the diff viewer of Chora allows an attacker to inject shellcode. An attacker can exploit PHP's file upload functionality to upload a malicious binary to a vulnerable server, chmod it as...

3.3AI score
Exploits0
securityvulns
securityvulns
added 2004/06/14 12:0 a.m.28 views

[UNIX] Chora CVS/SVN Viewer Remote Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

0.3AI score
Exploits0
Rows per page
Query Builder