UBUNTU-CVE-2016-2860

The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups as administrators by leveraging mishandling of the creator ID...

CVE-2016-2860

The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups as administrators by leveraging mishandling of the creator ID...

PT-2016-5247

Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.6.17 Description The issue allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions. This is due to the mishandling of the creator ID in the newEntry function. As a resul...

CVE-2014-1944: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry...

PT-2014-4376

Name of the Vulnerable Software and Affected Versions Ilch CMS versions 2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the text parameter to "index.php/guestbook/index/newentry". Recommendations For Ilch CMS versions 2.0...