39 matches found
Fedora Update for php-sabre-dav FEDORA-2014-3401
Check for the Version of php-sabre-dav OpenVAS Vulnerability Test Fedora Update for php-sabre-dav FEDORA-2014-3401 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for php-sabre-dav FEDORA-2014-3405
Check for the Version of php-sabre-dav OpenVAS Vulnerability Test Fedora Update for php-sabre-dav FEDORA-2014-3405 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for php-sabre-dav FEDORA-2014-3401
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 19 Update: php-sabre-dav-1.8.9-1.fc19
What is SabreDAV SabreDAV allows you to easily add WebDAV support to a PHP application. SabreDAV is meant to cover the entire standard, and attempts to allow integration using an easy to understand API. Feature list: Fully WebDAV compliant Supports Windows XP, Windows Vista, Mac OS/X, DavFSv2,...
CVE-2012-2916
Cross-site scripting XSS vulnerability in sabreclassadmin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the activeoption parameter to wp-admin/tools.php...
Cross site scripting
Cross-site scripting XSS vulnerability in sabreclassadmin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the activeoption parameter to wp-admin/tools.php...
CVE-2012-2916
CVE-2012-2916 describes a Cross-Site Scripting (XSS) vulnerability in the SABRE WordPress plugin prior to 2.1, specifically in sabre_class_admin.php. The flaw allows remote attackers to inject arbitrary script/HTML via the active_option parameter to wp-admin/tools.php. Affected component: SABRE p...
WordPress SABRE Plugin <= 2.0 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "activeoption" parameter to wp-admin/tools.php. Solution Update the plugin...
WordPress SABRE 1.2.0 Cross Site Scripting
Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...
CVE-2008-4407
XRunSabre in sabre aka xsabre 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service application unavailability by creating a /tmp/sabre.log file that cannot be overwritten...
CVE-2008-4406
A certain Debian patch to the run scripts for sabre aka xsabre 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files...
Code injection
A certain Debian patch to the run scripts for sabre aka xsabre 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files...
CVE-2008-4407
XRunSabre in sabre aka xsabre 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service application unavailability by creating a /tmp/sabre.log file that cannot be overwritten...
CVE-2008-4406
A certain Debian patch to the run scripts for sabre aka xsabre 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files...
CVE-2008-4406
The CVE-2008-4406 entry describes a Debian patch to the sabre (xsabre) 0.2.4b run scripts that enables local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files. Root cause: a symlink vulnerability in the patch path that affects local users. Impact per sour...
CVE-2008-4407
CVE-2008-4407 affects sabre (xsabre) 0.2.4b. The issue arises from relying on creating /tmp/sabre.log, allowing a local attacker to cause a denial of service by placing a non-overwritable /tmp/sabre.log. No explicit remediation/versions beyond 0.2.4b are stated in the provided documents. Exploita...
CVE-2002-1191
The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001...
CVE-2002-1191
The Sabserv client component in Sabre Desktop Reservation Software (versions 4.2–4.4) is vulnerable to remote denial of service caused by malformed input sent to TCP port 1001. The available sources confirm the affected component and the impact (DoS), but do not provide a patch version or remedia...