[ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Fedora Update for mysql FEDORA-2007-4471

Check for the Version of mysql OpenVAS Vulnerability Test Fedora Update for mysql FEDORA-2007-4471 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for mysql FEDORA-2007-4465

Check for the Version of mysql OpenVAS Vulnerability Test Fedora Update for mysql FEDORA-2007-4465 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CentOS Update for mysql CESA-2007:1155 centos4 x86_64

Check for the Version of mysql OpenVAS Vulnerability Test CentOS Update for mysql CESA-2007:1155 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2008-2480

PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the pagesdir parameter...

CVE-2008-2480

PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the pagesdir parameter...

CVE-2008-2480

The data shows CVE-2008-2480 affects the plusPHP Short URL Multi-User Script 1.6, specifically the file plus.php. The vulnerability is a PHP remote file inclusion triggered through a URL in the _pages_dir parameter, allowing an attacker to execute arbitrary PHP code on the affected system. The co...

plusphp-rfi.txt

Author: DR.TOXIC / [email protected] Title: plusPHP Multi-User Short URL and Statistics plus.php RFI Vulnerability Script Download: http://www.hotscripts.com/jump.php?listingid=80293&jumptype=1 Vulnerability Code: plus.php "include $pagesdir.'config.php';" Example;...

plusphp url shortening software 1.6 - Remote File Inclusion

plusphp url shortening software 1.6 - Remote File Inclusion Author: DR.TOXIC / [email protected] Title: plusPHP Multi-User Short URL and Statistics plus.php RFI Vulnerability Script Download: http://www.hotscripts.com/jump.php?listingid=80293&jumptype=1 Vulnerability Code: plus.php "includ...

plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability ======================================================================= Title: plusPHP Multi-Us...

plusphp url shortening software 1.6 - Remote File Inclusion

Author: DR.TOXIC / [email protected] Title: plusPHP Multi-User Short URL and Statistics plus.php RFI Vulnerability Script Download: http://www.hotscripts.com/jump.php?listingid=80293&jumptype=1 Vulnerability Code: plus.php "include $pagesdir.'config.php';" Example;...

Cisco VPN Client IPSec Driver Kernel Memory Corruption Vulnerability

Cisco VPN Client for Windows version 5.0.02.0090 contains a vulnerability that could allow a local attacker to cause the affected system to fail and restart, resulting in a denial of service DoS condition. This vulnerability exists due to invalid memory operations. An attacker could exploit this...

mysql security update

CentOS Errata and Security Advisory CESA-2007:1222-001 Updated mysql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user,...

RHEL 4 / 5 : mysql (RHSA-2007:1155)

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server...

[SECURITY] Fedora 7 Update: mysql-5.0.45-6.fc7

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

[SECURITY] Fedora 8 Update: mysql-5.0.45-6.fc8

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

security flaw

pamconsole does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges...

CVE-2007-4544

Cross-site scripting XSS vulnerability in wp-newblog.php in WordPress multi-user MU 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the weblogid parameter Username field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Multi User Randomizer phpMUR 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via 1 the editplugin parameter to configureplugin.tpl.php, or 2 certain array parameters to web/phpinfo.php, as demonstrated by 1 or a...

CVE-2007-2632

Multiple cross-site scripting XSS vulnerabilities in PHP Multi User Randomizer phpMUR 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via 1 the editplugin parameter to configureplugin.tpl.php, or 2 certain array parameters to web/phpinfo.php, as demonstrated by 1 or a...