17 matches found
EUVD-2005-4846
Malware in sbrugna...
EUVD-2014-2587
Malware in sbrugna...
EUVD-2007-4476
Malware in sbrugna...
EUVD-2005-4841
Malware in sbrugna...
EUVD-2007-4477
Malware in sbrugna...
EUVD-2005-4845
Malware in sbrugna...
EUVD-2005-4848
Malware in sbrugna...
EUVD-2008-6804
Malware in sbrugna...
EUVD-2022-2496
Malicious code in bioql PyPI...
CVE-2017-1000431
eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials...
CVE-2005-4855
Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js...
CVE-2005-4850
eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users...
CVE-2005-4857
eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service Apache httpd segmentation fault via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a...
CVE-2005-4854
eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders...
eZ Publish articleview.php XSS
The remote host is using ezPublish, a content management system. There is a flaw in the remote ezPublish which lets an attacker perform a cross-site scripting attack. An attacker may use this flaw to steal the cookies of your legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
EZ Publish 2.2 - index.php IMG Tag Cross-Site Scripting
EZ Publish 2.2 - index.php IMG Tag Cross-Site Scripting source: https://www.securityfocus.com/bid/7616/info A cross-site scripting vulnerability has been reported for eZ publish. Specifically, eZ publish does not sufficiently sanitize user-supplied input supplied to the 'index.php' script. This m...
EZ Publish 2.2.7/3.0 - site.ini Information Disclosure
source: https://www.securityfocus.com/bid/7347/info eZ Publish has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying site.ini configuration file. The file contains eZ Publish administration credentials stored in...