PT-2011-2367

Name of the Vulnerable Software and Affected Versions openSUSE Build Service OBS versions 2.0.x through 2.0.7 openSUSE Build Service OBS versions 2.1.x through 2.1.5 Description The issue allows attackers to bypass intended write-access restrictions and modify a package or project via unspecified...

CVE-2011-0462: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service OBS before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-0466: Undefined Security Weakness

The API in SUSE openSUSE Build Service OBS 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a 1 package or 2 project via unspecified vectors...

PT-2011-2364

Name of the Vulnerable Software and Affected Versions SUSE openSUSE Build Service OBS versions prior to 2.1.6 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the login page of the webui component. These vulnerabilities allow remote attackers to inject arbitrary...