Unfixed XSS vulnerability at www.ceipi.edu

Security researcher Atmon3r, has submitted on 28/12/2011 a cross-site-scripting XSS vulnerability affecting www.ceipi.edu, which at the time of submission ranked 1972385 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currentl...

apr / Apache mod_autoindex DoS

CPU resources exhaustion on request to indexed files with long names...

Google Hack Database Tool v1.1

Google Hack DB Tool is a database tool with almost 8,000 entries. It allows administrators the ability to check their site for vulnerabilities based on data stored in Google. With this tool you can find out if your website has indexed vulnerabilities in google. This can lead to sensitive...

Ubuntu Update for thunderbird vulnerabilities USN-915-1

Ubuntu Update for Linux kernel vulnerabilities USN-915-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9151.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird vulnerabilities USN-915-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2009-4341

SQL injection vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-4340

Cross-site scripting XSS vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4340

The CVE-2009-4340 entry describes a Cross-site scripting (XSS) vulnerability in the TYPO3 extension No indexed Search (no_indexed_search) version 0.2.0. The issue allows remote attackers to inject arbitrary web script or HTML, via unspecified vectors. The vulnerability is tied to TYPO3’s no_index...

CVE-2009-4340

Cross-site scripting XSS vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4341

SQL injection vulnerability in the No indexed Search noindexedsearch extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

kernel: ext4: make_indexed_dir() missing validation

The makeindexeddir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain reclen field, which allows local users to cause a denial of service OOPS by attempting to mount a crafted ext4 filesystem...

php: libgd imagerotate() array index error memory disclosure

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...

php: libgd imagerotate() array index error memory disclosure

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. VID 653606e9-f6ac-11dd-94d9-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 653606e9-f6ac-11dd-94d9-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD : typo3 -- multiple vulnerabilities (653606e9-f6ac-11dd-94d9-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and session fixation attacks, and compromise a vulnerable system. The 'Install tool' system extension uses...

DSA-1711-1 typo3-src - remote code execution

Bulletin has no description...

CVE-2009-0257

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 content of indexed files to the a Indexed Search Engine indexedsearch system extension; b...

CVE-2009-0258

The Indexed Search Engine indexedsearch system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line index...

CVE-2009-0258

The Indexed Search Engine indexedsearch system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line index...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 content of indexed files to the a Indexed Search Engine indexedsearch system extension; b...