707 matches found
CVE-2009-1596
Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password aka canChangePassword console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwdchange IQ packet...
CVE-2009-1595
The CVE-2009-1595 issue affects Ignite Realtime Openfire, where the jabber:iq:auth implementation in IQAuthHandler.java on versions before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts by modifying the username element in a passwd_change action. This enable...
HP-UX Update for Ignite-UX HPSBUX00111
Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX00111 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
HP-UX Update for the Ignite-UX or the DynRootDisk (DRD) get_system_info Command HPSBUX02249
Check for the Version of the Ignite-UX or the DynRootDisk DRD getsysteminfo Command OpenVAS Vulnerability Test HP-UX Update for the Ignite-UX or the DynRootDisk DRD getsysteminfo Command HPSBUX02249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
HP-UX Update for the Ignite-UX or the DynRootDisk (DRD) get_system_info Command HPSBUX02249
Check for the Version of the Ignite-UX or the DynRootDisk DRD getsysteminfo Command OpenVAS Vulnerability Test HP-UX Update for the Ignite-UX or the DynRootDisk DRD getsysteminfo Command HPSBUX02249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
HP-UX Update for Ignite-UX HPSBUX01219
Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX01219 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
HP-UX Update for Ignite-UX HPSBUX00111
Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX00111 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
HP-UX Update for Ignite-UX HPSBUX01219
Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX01219 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2008-6182
SQL injection vulnerability in the Ignite Gallery comignitegallery component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php...
Sql injection
SQL injection vulnerability in the Ignite Gallery comignitegallery component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php...
CVE-2008-6182
SQL injection vulnerability in the Ignite Gallery comignitegallery component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php...
CVE-2008-6182
CVE-2008-6182 affects the Ignite Gallery (com_ignitegallery) component for Joomla!, versions 0.8.0–0.8.3. The vulnerability is a SQL injection via the gallery parameter in a view action to index.php, caused by improper sanitization of user-supplied input. This allows remote attackers to execute a...
CVE-2009-0497
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...
Directory traversal
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...
CVE-2009-0497
CVE-2009-0497 is an Openfire vulnerability (Openfire 3.6.2 and affected builds) where the log.jsp component fails to validate the log parameter, allowing a remote attacker to perform a directory traversal (via ..) and read arbitrary files on the server. The issue is caused by improper input valid...
CVE-2009-0497
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...
CVE-2009-0496
Openfire (Ignite Realtime) versions prior to 3.6.3 are affected by multiple input-validation vulnerabilities (CVE-2009-0496 among others) in several .jsp pages, which could allow remote attackers to inject XSS and potentially upload a malicious plugin to achieve arbitrary code execution. The Gent...
CVE-2009-0496
Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...
