1258 matches found
CVE-2006-0498
CVE-2006-0498 describes multiple cross-site scripting (XSS) vulnerabilities in PHP GEN prior to 1.4, allowing remote attackers to inject arbitrary web script or HTML via unknown attack vectors. The connected documents corroborate the flaw across several sources (NVD entry and multiple mirrors), s...
CVE-2006-0497
Multiple SQL injection vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary SQL commands via unknown attack vectors...
CVE-2006-0498
Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2005-4707
Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2006-0497: Undefined Security Weakness
Multiple SQL injection vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary SQL commands via unknown attack vectors...
CVE-2006-0498: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2005-4707: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2005-4707
Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
[SA17560] PHP GEN Cross-Site Scripting Vulnerabilities
TITLE: PHP GEN Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA17560 VERIFY ADVISORY: http://secunia.com/advisories/17560/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP GEN 1.x http://secunia.com/product/6131/ DESCRIPTION: Some vulnerabilities...
[SA17295] phpBB Avatar Script Insertion Vulnerability
TITLE: phpBB Avatar Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17295 VERIFY ADVISORY: http://secunia.com/advisories/17295/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpBB 2.x http://secunia.com/product/463/ DESCRIPTION: K-Gen has discovered a...
CVE-2005-2180
CVE-2005-2180 concerns the GNATS generator, where in GNATS 4.0/4.1.0 (and possibly earlier) if the binary is installed setuid, it fails to properly validate files passed to the -o option and opens the target with write access, enabling a local user to overwrite arbitrary files. This is the core c...
CVE-2005-2180
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files...
CVE-2005-2180: Undefined Security Weakness
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files...
gnats.txt
Name: GNATS - gen-index Vendor URL: http://www.gnu.org/software/gnats Author: Adam Zabrocki Date: June 16, 2005 Issue: GNATS - the GNU problem report management system allows attacker to overwrite files with privileges suid root when compiled from sources and there isn't in system gnats user, whe...
GNU GNATS 4.0/4.1 - Gen-Index Arbitrary Local File Disclosure/Overwrite
source: https://www.securityfocus.com/bid/14169/info GNU GNATS gen-index allows local attackers to disclose and overwrite arbitrary files. A successful attack can result in privilege escalation and a complete compromise of the affected computer as gen-index is installed with setuid permissions. G...
GNU GNATS 4.04.1 - Gen-Index Arbitrary Local File DisclosureOverwrite
GNU GNATS 4.04.1 - Gen-Index Arbitrary Local File DisclosureOverwrite source: https://www.securityfocus.com/bid/14169/info GNU GNATS gen-index allows local attackers to disclose and overwrite arbitrary files. A successful attack can result in privilege escalation and a complete compromise of the...
GNATS - gen-index
Name: GNATS - gen-index Vendor URL: http://www.gnu.org/software/gnats Author: Adam Zabrocki [email protected] Date: June 16, 2005 Issue: GNATS - the GNU problem report management system allows attacker to overwrite files with privileges suid root when compiled from sources and there isn't in system...
