Debian: Security Advisory (DSA-179)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4432: Undefined Security Weakness

Untrusted search path vulnerability in the wrapper scripts for the 1 rug, 2 zen-updater, 3 zen-installer, and 4 zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified a LDLIBRARYPATH and b MONOGACPREFIX environment variables...

Session fixation

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-3597

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-3597

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...

CVE-2007-3597

CVE-2007-3597 describes a session fixation vulnerability in Zen Cart 1.3.7 and earlier, where an attacker can hijack web sessions by setting the Cookie parameter. The affected software is Zen Cart (versions up to and including 1.3.7); the underlying issue is that session identifiers can be preset...

CVE-2007-3597: Improper Authentication

Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter...

Session fixation in Zen Cart CMS

==================================================================================== Team Intell Security Advisory TISA2007-05 ------------------------------------------------------------------------------------ Zen Cart 1.3.7 - Session fixation Issue in backend Administration interface...

Improper access control

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146

Affected product: Zen Help Desk 2.1. Vulnerability: Insufficient access control allows remote attackers to download the ZenHelpDesk.mdb database via a direct request, because sensitive information is stored under the web root. Impact (as stated): Exposure of a password-containing database. Status...

CVE-2007-3146

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

CVE-2007-3146: Undefined Security Weakness

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb...

zen-mdb.txt

--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...

Zen Help Desk ==> Version 2.1 Bypass/

--/ INTRODUCTION -- Advisory : Zen Help Desk == Version 2.1 Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Zen Help Desk == Version 2.1 Impact : Remote Googledork : "CopyRight 2004 Zen Help Desk" ,allintitle:Zen Help Desk or or"allinurl:trackrequest.asp" Author...

Cross site scripting

Cross-site scripting XSS vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen Rainbow.Zen extension allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-0885

Cross-site scripting XSS vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen Rainbow.Zen extension allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-0885

The Jira Rainbow.Zen extension is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the jira/secure/BrowseProject.jspa component. The root cause is the application's failure to properly sanitize user-supplied input, specifically via the id parameter. Remote attackers can exploit this to...

CVE-2006-6868

Multiple cross-site scripting XSS vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6868

CVE-2006-6868 affects Zen Cart Web Shopping Cart prior to 1.3.7. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the NVD entry, the CVSS v2 base score is 6.8 (Mediu...