RHEL 4 / 5 : firefox (RHSA-2009:1162)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

BigACE username参数SQL注入漏洞

BUGTRAQ ID: 34920 BIGACE是免费的Web内容管理系统，可帮助创建和管理网站。 在注册新用户时BIGACE没有正确地过滤对username参数的输入，远程攻击者可以提交恶意请求执行SQL注入攻击。成功利用这个漏洞要求禁用了magicquotesgpc。 Kevin Papst BigACE 2.5 厂商补丁： Kevin Papst ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.bigace.de/index.html...

Debian Security Advisory DSA 1792-1 (drupal6)

The remote host is missing an update to drupal6 announced via advisory DSA 1792-1. OpenVAS Vulnerability Test $Id: deb17921.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1792-1 drupal6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1792-1 : drupal6 - multiple vulnerabilities

Multiple vulnerabilities have been discovered in drupal, a web content management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1575 pod.Edge discovered a cross-site scripting vulnerability due that can be triggered when some browsers...

DSA-1792-1 drupal6 - multiple vulnerabilities

Bulletin has no description...

RedHat Security Advisory RHSA-2009:0437

The remote host is missing updates announced in advisory RHSA-2009:0437. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

RedHat Security Advisory RHSA-2009:0436

The remote host is missing updates announced in advisory RHSA-2009:0436. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2009:0436 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...

CentOS 3 / 4 : seamonkey (CESA-2007:0402)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:0437 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

RHEL 4 / 5 : firefox (RHSA-2009:0436)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0436 advisory. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC...

Sun Java System Delegated Administrator 6.x - HTTP Response Splitting

Sun Java System Delegated Administrator 6.x - HTTP Response Splitting source: https://www.securityfocus.com/bid/34643/info Sun Java System Delegated Administrator is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can...

Sun Java System Delegated Administrator 6.x - HTTP Response Splitting

source: https://www.securityfocus.com/bid/34643/info Sun Java System Delegated Administrator is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is served,...

Asbru Web Content Management Vulnerabilities

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 02-Apr-2009 Software: Asbru Software - Asbru Web Content Management http://www.asbrusoft.com/ "Ready to use, full-featured, database-driven web content management system CMS with integrated communit...

Asbru Web Content Management 6.56.6.9 - SQL Injection Cross-Site Scripting

Asbru Web Content Management 6.56.6.9 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/34349/info Asbru Web Content Management is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize...

Asbru Web Content Management 6.5/6.6.9 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/34349/info Asbru Web Content Management is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

X-BLC 0.2.0 (get_read.php section) SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a dynamic...

X-BLC 0.2.0 SQL Injection

!/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a dynamic web content management system written in...

X-BLC 0.2.0 - 'get_read.php?section' SQL Injection

!/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a dynamic web content management system written in...