[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing

------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...

Fedora Core 12 FEDORA-2009-12370 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12370. OpenVAS Vulnerability Test $Id: fcore200912370.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12370 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-12457 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12457. OpenVAS Vulnerability Test $Id: fcore200912457.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12457 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-12444 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12444. OpenVAS Vulnerability Test $Id: fcore200912444.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12444 awstats Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-12444 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12444. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 12 FEDORA-2009-12370 (awstats)

The remote host is missing an update to awstats announced via advisory FEDORA-2009-12370. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora 10 : awstats-6.95-1.fc10 (2009-12444)

Fix security in awredir.pl script by adding a security key required by default. - Enhance security of parameter sanitizing function. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

[SECURITY] [DSA 1933-1] New cups packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1933-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 10, 2009 http://www.debian.org/security/faq -...

CVE-2009-3633

Cross-site scripting XSS vulnerability in the t3libdiv::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing...

webSPELL 4.2.0d (Linux) - Local File Disclosure

/ webSPELL ------------------------------ Possible Fix: $file = pregreplace'/^a-zA-Z0-9/','',addslashes$GET'id'; otherwise if $GET'id' variable is an integer use intval function. $file =...

Fedora Core 9 FEDORA-2009-3692 (phpMyAdmin)

The remote host is missing an update to phpMyAdmin announced via advisory FEDORA-2009-3692. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 9 : phpMyAdmin-3.1.3.2-1.fc9 (2009-3692)

Improvements for 3.1.3.2: - security Insufficient output sanitizing when generating configuration file http://www.phpmyadmin.net/homepage/security/PMASA-2009-4.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Flatnuke 2.7.1 - level Privilege Escalation

Flatnuke 2.7.1 - level Privilege Escalation !/usr/bin/env perl Flatnuke timeout5; $lwp-agent'Links 2.1pre26; Linux 2.6.19-gentoo-r5 x8664; x'; $lwp-defaultheader'Cookie' = "myforum=$user; path=$path; secid=$secid; path=$path;"; $ret = $lwp-post"http://$h...

Fedora Core 9 FEDORA-2009-2984 (phpMyAdmin)

The remote host is missing an update to phpMyAdmin announced via advisory FEDORA-2009-2984. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 9 : phpMyAdmin-3.1.3.1-1.fc9 (2009-2984)

Improvements for 3.1.3.1: - security HTTP Response Splitting and file inclusion vulnerabilities - security XSS vulnerability on export page - security Insufficient output sanitizing when generating configuration file Note that Tenable Network Security has extracted the preceding description block...

FreeBSD : phpmyadmin -- insufficient output sanitizing when generating configuration file (06f9174f-190f-11de-b2f0-001c2514716c)

phpMyAdmin reports : Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Insufficient output sanitizing when generating configuration file.

PMASA-2009-3 Announcement-ID: PMASA-2009-3 Date: 2009-03-24 Summary Insufficient output sanitizing when generating configuration file. Description Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file...

DTSA-187-1 moin - insufficient input sanitising

Bulletin has no description...

ActiveRecord Gem :limit / :offset SQL Injection

The issue is due to the program not properly sanitizing user-supplied input related to the :limit and :offset functions. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

ZoneMinder Multiple Vulnerabilities

ZoneMinder Multiple Vulnerabilities by Filip Palian filip dot palian at pjwstk dot edu dot pl Software affected: ZoneMinder = 1.23.3 Severity: Critical Description from the vendor site: ZoneMinder is an integrated set of applications which provide a complete surveillance solution allowing capture...