500 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Drupal modules 1 Internationalization i18n 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and 2 Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecifie...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Internationalization i18n Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors...
CVE-2008-1976
Multiple cross-site scripting XSS vulnerabilities in the Drupal modules 1 Internationalization i18n 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and 2 Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecifie...
CVE-2008-1977
CVE-2008-1977 describes a CSRF vulnerability in the Drupal Internationalization (i18n) module. Affected: Drupal i18n module versions 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1. The issue allows remote attackers to change node translation relationships via unspecified vectors. T...
CVE-2008-1976
CVE-2008-1976 describes multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1; and Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11. The flaws allow remote attackers to inject arbitrar...
CVE-2008-1976: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Drupal modules 1 Internationalization i18n 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and 2 Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecifie...
CVE-2008-1977: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Internationalization i18n Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors...
SA-2008-028 - Internationalization and Localizer - Cross site scripting
The Internationalization i18n and Localizer modules add multi-lingual capabilities to Drupal sites. They provide control over a site's user interface language, the ability to enter and control content in multiple languages, and can detect the browser language. Several values are displayed without...
[SECURITY] Fedora 7 Update: kde-i18n-3.5.8-1.fc7
Internationalization support for KDE...
[SECURITY] Fedora 7 Update: kdevelop-3.5.0-4.fc7
The KDevelop Integrated Development Environment provides many features that developers need as well as providing a unified interface to programs like gdb, the C/C++ compiler, and make. KDevelop manages or provides: All development tools needed for C++ programming like Compiler, Linker, automake a...
Design/Logic Flaw
The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...
PYSEC-2007-1
The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...
PYSEC-2007-1
The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...
DEBIAN-CVE-2007-5712
The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...
CVE-2007-5712
The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...
FreeBSD : py-django -- denial of service vulnerability (d2c2952d-85a1-11dc-bfff-003048705d5a)
Django project reports : A per-process cache used by Django's internationalization 'i18n' system to store the results of translation lookups for particular values of the HTTP Accept-Language header used the full value of that header as a key. An attacker could take advantage of this by sending...
Plume CMS 1.1.3 - 'dbinstall.php' Remote File Inclusion
/------------------------------------------------ IHS Public advisory -------------------------------------------------/ Plume CMS Remote File Inclusion It uses PHP and MySql. With a single installation of Plume you can have multiple websites, file management, multiple authors with different righ...
man format string bug
Format string bug during processing internationalization data from catalog file...