CVE-2008-1316

The CVE-2008-1316 entry describes a SQL injection vulnerability in QT-cute QuickTalk Forum, specifically in the script qtf_ind_search_ov.php for version 1.6 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the id parameter, affecting data confidentiality, integr...

QuickTicket 1.5 - 'qti_usr.php' SQL Injection

Script name: QuickTicket Site: http://www.qt-cute.org Vulnerability: remote sql injection at qtiusr.php Download: v 1.4: http://www.qt-cute.org/download/qti14.zip v 1.5.0.3: http://www.qt-cute.org/download/qti15.zip Vulnerable code: 1.4 ; 1.5 is pretty the same if isset$GET'id' $id = $GET'id'; //...

QuickTicket 1.5 - qti_usr.php SQL Injection

QuickTicket 1.5 - qtiusr.php SQL Injection Script name: QuickTicket Site: http://www.qt-cute.org Vulnerability: remote sql injection at qtiusr.php Download: v 1.4: http://www.qt-cute.org/download/qti14.zip v 1.5.0.3: http://www.qt-cute.org/download/qti15.zip Vulnerable code: 1.4 ; 1.5 is pretty t...

USN-579-1: Qt vulnerability

It was discovered that QSslSocket did not properly verify SSL certificates. A remote attacker may be able to trick applications using QSslSocket into accepting invalid SSL certificates...

Cross site scripting

Cross-site scripting XSS vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web script or HTML via the qt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Debian: Security Advisory (DSA-1426-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 542-1 (qt-copy)

The remote host is missing an update to qt-copy announced via advisory DSA 542-1. OpenVAS Vulnerability Test $Id: deb5421.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 542-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1426-1 (qt-x11-free)

The remote host is missing an update to qt-x11-free announced via advisory DSA 1426-1. OpenVAS Vulnerability Test $Id: deb14261.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1426-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 542-1 (qt-copy)

The remote host is missing an update to qt-copy announced via advisory DSA 542-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1200-1 (qt-x11-free)

The remote host is missing an update to qt-x11-free announced via advisory DSA 1200-1. An integer overflow has been found in the pixmap handling routines in the Qt GUI libraries. This could allow an attacker to cause a denial of service and possibly execute arbitrary code by providing a specially...

Debian: Security Advisory (DSA-1200-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5965

QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user...

CVE-2007-5965

QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user...

CVE-2007-5965

Removed by vendor...

CVE-2007-5965

QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user...

CVE-2007-5965

CVE-2007-5965 affects Trolltech Qt 4.3.0–4.3.2, where QSslSocket does not correctly verify SSL certificates. This can allow remote attackers to trick users into accepting an invalid server certificate for a spoofed service or cause a service to accept an invalid client certificate (I) as describe...

Trolltech Qt QSslSocket类证书验证绕过安全限制漏洞

BUGTRAQ ID: 27112 CVECAN ID: CVE-2007-5965 Qt是一款C++应用开发工具，包括类库和跨平台开发工具。 Qt可能没有对SSL连接中的QSslSocket类证书执行验证，使用QSslSocket的应用可能受骗接受伪造的证书，这有助于攻击者执行网络钓鱼类的攻击。 Trolltech Qt 4.3.2 Trolltech Qt 4.3.1 Trolltech Qt 4.3.0 Trolltech --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] Fedora 7 Update: qt4-4.3.3-1.fc7

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

[SECURITY] Fedora 8 Update: qt4-4.3.3-1.fc8

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

SuSE 10 Security Update : Qt3 (ZYPP Patch Number 2190)

Multiple integer overflows have been found in image processing functions within the QT library. These could potentially lead to heap overflows and code execution. CVE-2006-4811 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...