CVE-2009-2937

Summary: CVE-2009-2937 is a cross-site scripting (XSS) vulnerability affecting Planet 2.0 and Planet Venus. The issue allows remote attackers to inject arbitrary web script or HTML through the SRC attribute of an IMG element in a feed. The connected sources reiterate the same description, with Re...

CVE-2009-2937

Removed by vendor...

CVE-2009-2937: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...

Fedora 10 : planet-2.0-10.fc10 (2009-9601)

security patch to sanitize content from rss feeds for JavaScript Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

[SECURITY] Fedora 10 Update: planet-2.0-10.fc10

Planet is a flexible feed aggregator, this means that it downloads feeds and aggregates their content together into a single combined feed with the latest news first. It uses Mark Pilgrim's Ultra-liberal feed parser so can read from RDF, RSS and Atom feeds and Tomas Styblo's template library to...

[SECURITY] Fedora 11 Update: planet-2.0-10.fc11

Planet is a flexible feed aggregator, this means that it downloads feeds and aggregates their content together into a single combined feed with the latest news first. It uses Mark Pilgrim's Ultra-liberal feed parser so can read from RDF, RSS and Atom feeds and Tomas Styblo's template library to...

Fedora Core 10 FEDORA-2009-9601 (planet)

The remote host is missing an update to planet announced via advisory FEDORA-2009-9601. OpenVAS Vulnerability Test $Id: fcore20099601.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9601 planet Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Planet 2.0 - HTML Injection

Planet 2.0 - HTML Injection source: https://www.securityfocus.com/bid/36392/info Planet is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would...

Unfixed XSS vulnerability at www.planet-provence.com

Security researcher Mystick, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.planet-provence.com, which at the time of submission ranked 1634043 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It i...

CVE-2003-1507

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access...

CVE-2003-1507

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches expose a default superuser account with the password “planet,” enabling remote administrators to gain full control. The vulnerability is described consistently across CVE records and NVD entries, with a base CVSS2 score of 10.0 (high impa...

CVE-2003-1507: Undefined Security Weakness

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access...

Unfixed XSS vulnerability at search.lonelyplanet.com

Security researcher kaksii, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting search.lonelyplanet.com, which at the time of submission ranked 3593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Design/Logic Flaw

The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service administration interface outage via an HTTP request without a Host header...

CVE-2007-4477

The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service administration interface outage via an HTTP request without a Host header...

CVE-2007-4477

The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service administration interface outage via an HTTP request without a Host header...

CVE-2007-4477

CVE-2007-4477 affects the Planet VC-200M VDSL2 router. The vulnerability is in the administration interface where an HTTP request without a Host header can cause a denial of service (administration outage). Documented impact from NVD indicates availability impact (PARTIAL). Exploitation details a...

CVE-2007-4477: Undefined Security Weakness

The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service administration interface outage via an HTTP request without a Host header...

Planet VC-200M DSL router DoS

Inaccessible administration interface on HTTP GET request with missed Host: header...

Planet VC-200M

Hello 3APA3A! Вот багу нашел, вендор откровенно тупит, похоже не хочет возится с прошивкой, по сему просьба опубликовать, может зачешутся... Planet VC-200M VDSL2 router Built in HTTP-server failure, if "Host:" header absent in HTTP-query. The further remote administration is impossible. Встроенны...