Debian: Security Advisory (DSA-1242-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1242-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27th, 2006 http://www.debian.org/security/faq -...

DSA-1242-1 elog

Bulletin has no description...

CVE-2006-5791

Multiple cross-site scripting XSS vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the filename for downloading, which is not quoted in an error message by the sendfiledirect function, and 2 the Type or Category values in a N...

CVE-2006-5791

CVE-2006-5791 affects the elog web-based logbook (ELOG 2.6.2 and earlier). The vulnerability arises from cross-site scripting in elogd.c, specifically via the download filename in send_file_direct and the Type/Category fields in New entries, allowing remote attackers to inject arbitrary HTML/scri...

CVE-2006-5791

Removed by vendor...