EUVD-2014-9566

Malware in sbrugna...

GOsa Incorrect Access Control Vulnerability

GOsa is an LDAP manager. The product is mainly used for system administration to manage users and groups, applications, phones and faxes. A security vulnerability exists in GOsa. An attacker could exploit this vulnerability to gain unauthorized access to the LDAP database...

CVE-2014-9760

Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...

DEBIAN-CVE-2007-0313

Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...