Atlassian Confluence Multiple Cross Site Scripting Vulnerabilities

Atlassian Confluence is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user- supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

[ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

PHP Multiple Newsletters 2.7 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. Lfi/xss script: PHPMultipleNewsletters v2.7 download from:http://www.phpmultiplenewsletters.com/modules/phpmultiplenewsletters.com/dist/free/PHPMultipleNewslettersv2.7.zip vul:/index.php line 36: include 'language/'..$REQUEST'lang'.'.php'; xpl:...

Novell iManager < 2.7 SP1 Property Book Pages Arbitrary Plug-in Studio Deletion

Novell iManager is installed on the remote host. The version of iManager installed reportedly fails to implement sufficient access control checks on 'Property Book Pages' created with Plug-in Studio before granting delete privileges on them to a user. %NASLMINLEVEL 70300 C Tenable Network Securit...

JIRA Portlet Macro not displaying when authenticating using the trusted application between JIRA and Confluence

We're having issues using the JIRA portlet macro jiraportlet on pages inside Confluence. Whenever we try to use this macro using the trust between JIRA and Confluence for authentication, the macro does not display on the page. There aren't any errors, it just doesn't appear. code...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."...

LiteWEB Web Server 2.7 - Invalid Page Remote Denial of Service

source: https://www.securityfocus.com/bid/24628/info LiteWeb webserver is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate...

Marwel 2.7 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15959/info Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Woltlab Burning Board info_db.php multiple SQL injection

Woltlab Burning Board infodb.php multiple SQL injection -discovered by R Vendor: "Trooper" URL: www.wbbcoderforum.de Version: = 2.7 Type: SQL-injection Description: ------------------------ Info-DB is a very powerful and popular download-module with many features. Information:...

CVE-2003-0056

Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...

CVE-1999-1014

Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument...

CVE-2001-0117

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack...

PT-1999-1399 · Alt N · Mdaemon

Name of the Vulnerable Software and Affected Versions: MDaemon version 2.7 Description: A denial of service issue exists due to a large number of connection attempts. Recommendations: For MDaemon version 2.7, consider implementing rate limiting on incoming connections to prevent excessive...