Sql injection

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

CVE-2013-7374

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

CVE-2013-7374

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

CVE-2013-7374: Undefined Security Weakness

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

Ubuntu 13.10 : indicator-datetime vulnerability (USN-2186-1)

It was discovered that the Date and Time Indicator incorrectly allowed Evolution to be opened at the greeter screen. An attacker could use this issue to possibly gain unexpected access to applications such as a web browser with privileges of the greeter user. Note that Tenable Network Security ha...

USN-2186-1: Date and Time Indicator vulnerability

It was discovered that the Date and Time Indicator incorrectly allowed Evolution to be opened at the greeter screen. An attacker could use this issue to possibly gain unexpected access to applications such as a web browser with privileges of the greeter user...

CVE-2013-7374

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

UBUNTU-CVE-2013-7374

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

CVE-2014-1223

Cross-site scripting XSS vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtain...

Cross site scripting

Cross-site scripting XSS vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtain...

CVE-2014-1223

Cross-site scripting XSS vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtain...

CVE-2014-1223

Telligent Evolution (controlpanel/loading.aspx) is affected by an XSS vulnerability due to improper filtering of the msg parameter. Versions affected include before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651. An attacker can inject arbitrary script/HTML via the msg...

PT-2014-4022

Name of the Vulnerable Software and Affected Versions Telligent Evolution versions prior to 6.1.19.36103 Telligent Evolution versions 7.x prior to 7.1.12.36162 Telligent Evolution versions 7.5.x Telligent Evolution versions 7.6.x prior to 7.6.7.36651 Description A cross-site scripting XSS issue...

CVE-2014-1223: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtain...

Telligent Evolution 'loading.aspx'跨站脚本漏洞

Bugtraq ID:65739 CVE ID:CVE-2014-1223 Telligent Evolution是一款基于WEB的应用系统。 Telligent Evolution 'loading.aspx'不正确过滤用户提交给'msg'参数的数据，允许远程攻击者利用漏洞提交特殊的URI，诱使用户解析，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Telligent Evolution 目前没有详细解决方案提供： http://telligent.com/support/telligentevolutionplatform/...

Telligent Evolution 7.5.0.32466 Cross Site Scripting

Vulnerability title: Cross-site Scripting in Telligent Evolution CVE: CVE-2014-1223 Vendor: Telligent Product: Evolution Affected version: 7.5.0.32466 Fixed version: 7.6.7.36651 Reported by: Jerzy Kramarz Details: It is possible for an attacker to inject JavaScript by manipulating the 'msg'...

Scientific Linux Security Update : evolution on SL6.x i386/x86_64 (20131121)

A flaw was found in the way Evolution selected GnuPG public keys when encrypting emails. This could result in emails being encrypted with public keys other than the one belonging to the intended recipient. CVE-2013-4166 The Evolution packages have been upgraded to upstream version 2.32.3, which...

Oracle Linux 6 : evolution (ELSA-2013-1540)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1540 advisory. - Add patch for RH bug 990380 CVE-2013-4166 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...