XSS vulnerabilities in insert image and link actions

In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...

Fedora 8 : ruby-1.8.6.114-1.fc8 (2008-2443)

Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...

Fedora 7 : ruby-1.8.6.114-1.fc7 (2008-2458)

Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...

Unfixed XSS vulnerability at www.rinteln.de

Security researcher J0hn.X3r, has submitted on 03/11/2008 a cross-site-scripting XSS vulnerability affecting www.rinteln.de, which at the time of submission ranked 694448 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2009. It is current...

Unfixed XSS vulnerability at quicksoftupdate.com

Security researcher Mystick, has submitted on 03/11/2008 a cross-site-scripting XSS vulnerability affecting quicksoftupdate.com, which at the time of submission ranked 17203270 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.l2tc.com

Security researcher death-angel, has submitted on 03/10/2008 a cross-site-scripting XSS vulnerability affecting www.l2tc.com, which at the time of submission ranked 2066637 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is...

Unfixed XSS vulnerability at www.gavaciutat.cat

Security researcher zprian, has submitted on 03/04/2008 a cross-site-scripting XSS vulnerability affecting www.gavaciutat.cat, which at the time of submission ranked 2343762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

[SECURITY] [DSA 1501-1] New dspam packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1501-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 21, 2008 http://www.debian.org/security/faq -...

Sql injection

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

Unfixed XSS vulnerability at www.bits-iserlohn.de

Security researcher Fabian Fingerle, has submitted on 18/02/2008 a cross-site-scripting XSS vulnerability affecting www.bits-iserlohn.de, which at the time of submission ranked 280478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. ...

[SECURITY] [DSA 1488-1] New phpbb2 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1488-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 09, 2008 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.pornograb.com

Security researcher PaPPy, has submitted on 02/08/2008 a cross-site-scripting XSS vulnerability affecting www.pornograb.com, which at the time of submission ranked 84267 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is currentl...

Unfixed XSS vulnerability at www.sitelutions.com

Security researcher Shocker -at- ShockingSoft.com, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.sitelutions.com, which at the time of submission ranked 99238 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.ciscoredacaovirtual.com

Security researcher mygotmanoel, has submitted on 02/01/2008 a cross-site-scripting XSS vulnerability affecting www.ciscoredacaovirtual.com, which at the time of submission ranked 1075343 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.tavsancali.net

Security researcher SeYMeN, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.tavsancali.net, which at the time of submission ranked 1963442 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/02/2008. It is...

Unfixed XSS vulnerability at education.answerbox.net

Security researcher Uber0n, has submitted on 27/01/2008 a cross-site-scripting XSS vulnerability affecting education.answerbox.net, which at the time of submission ranked 20676 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Fedora 7 : clamav-0.92-6.fc7 (2008-0170)

Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

Unfixed XSS vulnerability at cscmp.org

Security researcher holisticinfosec, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting cscmp.org, which at the time of submission ranked 659022 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is...

[SECURITY] [DSA 1465-2] New apt-listchanges packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1465-2 [email protected] http://www.debian.org/security/ Steve Kemp January 17, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1171-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 1171-1. Several remote vulnerabilities have been discovered in the Ethereal network scanner, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...