Fedora 8 : phpMyAdmin-2.11.8.1-1.fc8 (2008-6810)

This update solves PMASA-2008-6 phpMyAdmin security announcement from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-6 - interface Table list pagination in navi - profiling Profiling causes query to be executed again really...

[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

FTP Server Zipped .csv File Detection

Binary data 4040.prm...

FTP Server Zipped .csv File Uploaded

Binary data 4056.prm...

.csv File Upload Detection

Binary data 4022.prm...

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

Libstats 1.0.3 Cyber-warrior.org milw0rm.com 2007-05-18...

Microsoft Office .csv File Detection

Binary data 3825.prm...

Comdev-misc.txt

+-------------------------------------------------------------------- + + Comdev CSV Importer 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev CSV Importer 3.1 + Venedor ...........: http://www.comdevweb.com +...

CVE-2006-5101

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in 1 Comdev Contact Form 3.1, 2 Comdev Customer Helpdesk 3.1, 3 Comdev Events Calendar 3.1, 4 Comdev FAQ Support 3.1, 5 Comdev Guestbook 3.1, 6 Comdev Links Directory 3.1, 7 Comdev News...

CVE-2006-5101

CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...

CVE-2006-5101

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in 1 Comdev Contact Form 3.1, 2 Comdev Customer Helpdesk 3.1, 3 Comdev Events Calendar 3.1, 4 Comdev FAQ Support 3.1, 5 Comdev Guestbook 3.1, 6 Comdev Links Directory 3.1, 7 Comdev News...

Comdev eCommerce 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev eCommerce 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev eCommerce 3.1 + Venedor ...........: http://www.comdevweb.com + Class...

Comdev News Publisher 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev News Publisher 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev News Publisher 3.1 + Venedor ...........: http://www.comdevweb.com ...

Comdev CSV Importer 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev CSV Importer 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev CSV Importer 3.1 + Venedor ...........: http://www.comdevweb.com +...

Comdev Links Directory 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev Links Directory 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev CSV Importer 3.1 + Venedor ...........: http://www.comdevweb.com +...

PYSEC-2006-8

The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...

CVE-2005-4190

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...

CVE-2005-4190

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...

[SA16338] Jax LinkLists Cross-Site Scripting and Information Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

K-COLLECT CSV_DB / i_DB csv_db.cgi file Parameter Arbitrary Command Execution

The remote host is running K-COLLECT csv-database, a web application written in perl. The remote version of this software fails to sanitize user input to the 'file' parameter of the 'csvdb.cgi' script before using it to run a shell command. An unauthenticated can exploit this issue to execute...