Debian Security Advisory DSA 1580-1 (phpgedview)

The remote host is missing an update to phpgedview announced via advisory DSA 1580-1. OpenVAS Vulnerability Test $Id: deb15801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1580-1 phpgedview Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1580-1 : phpgedview - programming error

It was discovered that phpGedView, an application to provide online access to genealogical data, allowed remote attackers to gain administrator privileges due to a programming error. Note: this problem was a fundamental design flaw in the interface API to connect phpGedView with external programs...

[SECURITY] [DSA 1580-1] New phpgedview packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1580-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 http://www.debian.org/security/faq -...

DSA-1580-1 phpgedview - privilege escalation

Bulletin has no description...

[SECURITY] [DSA 1580-1] New phpgedview packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1580-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 http://www.debian.org/security/faq -...

CVE-2008-2064

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface API to connect phpGedView with external programs like content management systems."...

CVE-2008-2064

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface API to connect phpGedView with external programs like content management systems."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface API to connect phpGedView with external programs like content management systems."...

CVE-2008-2064

Affected product: phpGedView. The Debian advisory (DSA-1580-1) and related OpenVAS/NASL entries describe a remote privilege-escalation flaw in phpGedView caused by a programming error tied to a fundamental design flaw in the API that connects phpGedView with external programs (such as CMS interfa...

CVE-2008-2064

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface API to connect phpGedView with external programs like content management systems."...

CVE-2008-2064: Undefined Security Weakness

Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface API to connect phpGedView with external programs like content management systems."...

Debian DSA-1559-1 : phpgedview - insufficient input sanitising

It was discovered that phpGedView, an application to provide online access to genealogical data, performed insufficient input sanitising on some parameters, making it vulnerable to cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

[SECURITY] [DSA 1559-1] New phpgedview packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1559-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 27, 2008 http://www.debian.org/security/faq -...

DSA-1559-1 phpgedview - cross site scripting

Bulletin has no description...

CVE-2007-5051

Multiple cross-site scripting XSS vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 boxwidth, 2 PEDIGREEGENERATIONS, and 3 rootid parameters in ancestry.php, and the 4 newpid parameter in timeline.php. NOTE: the provenance of this...

CVE-2007-5051

Multiple cross-site scripting XSS vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 boxwidth, 2 PEDIGREEGENERATIONS, and 3 rootid parameters in ancestry.php, and the 4 newpid parameter in timeline.php. NOTE: the provenance of this...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 boxwidth, 2 PEDIGREEGENERATIONS, and 3 rootid parameters in ancestry.php, and the 4 newpid parameter in timeline.php. NOTE: the provenance of this...

CVE-2007-5051

PhpGedView 4.1.1 is affected by multiple cross-site scripting (XSS) vulnerabilities. The NVD entry attributes impact to remote code execution of injected scripts via parameters in ancestry.php (box_width, PEDIGREE_GENERATIONS, rootid) and timeline.php (newpid). Debian and Debian-derived advisorie...

CVE-2007-5051: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 boxwidth, 2 PEDIGREEGENERATIONS, and 3 rootid parameters in ancestry.php, and the 4 newpid parameter in timeline.php. NOTE: the provenance of this...

CVE-2007-5051

Multiple cross-site scripting XSS vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 boxwidth, 2 PEDIGREEGENERATIONS, and 3 rootid parameters in ancestry.php, and the 4 newpid parameter in timeline.php. NOTE: the provenance of this...