EUVD-2010-2171

Malware in sbrugna...

EUVD-2009-4845

Malware in sbrugna...

Debian: Security Advisory (DSA-2056-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2056-1 (zonecheck)

The remote host is missing an update to zonecheck announced via advisory DSA 2056-1. OpenVAS Vulnerability Test $Id: deb20561.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2056-1 zonecheck Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian DSA-2056-1 : zonecheck - missing input sanitizing

It was discovered that in ZoneCheck, a tool to check DNS configurations, the CGI does not perform sufficient sanitation of user input; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] [DSA 2056-1] New zonecheck packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2056-1 [email protected] http://www.debian.org/security/ Sébastien Delafond June 06, 2010 http://www.debian.org/security/faq -...

DSA-2056-1 zonecheck - cross-site scripting

Bulletin has no description...

CVE-2010-2155

Multiple cross-site scripting XSS vulnerabilities in zc/publisher/html.rb in ZoneCheck 2.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 xmlnode.value, 2 zc-error text, 3 $zcversion, 4 domainname in a zc-title row, different vulnerabilities than...

CVE-2010-2155

Multiple cross-site scripting XSS vulnerabilities in zc/publisher/html.rb in ZoneCheck 2.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 xmlnode.value, 2 zc-error text, 3 $zcversion, 4 domainname in a zc-title row, different vulnerabilities than...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in zc/publisher/html.rb in ZoneCheck 2.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 xmlnode.value, 2 zc-error text, 3 $zcversion, 4 domainname in a zc-title row, different vulnerabilities than...

CVE-2010-2155

CVE-2010-2155 covers cross-site scripting in ZoneCheck 2.1.0 (zn: zc/publisher/html.rb), enabling remote script/HTML injection via (xmlnode.value, zc-error text, $zc_version, domainname in a zc-title row). Connected advisories confirm this issue and note the impact as XSS. Remediation: Debian fix...

CVE-2010-2155

Multiple cross-site scripting XSS vulnerabilities in zc/publisher/html.rb in ZoneCheck 2.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 xmlnode.value, 2 zc-error text, 3 $zcversion, 4 domainname in a zc-title row, different vulnerabilities than...

CVE-2010-2155

Removed by vendor...

CVE-2009-4882

Cross-site scripting XSS vulnerability in zc/publisher/html.rb in ZoneCheck 2.0.4-13 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the ns parameter to zc.cgi...

Cross site scripting

Cross-site scripting XSS vulnerability in zc/publisher/html.rb in ZoneCheck 2.0.4-13 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the ns parameter to zc.cgi...

CVE-2009-4882

Cross-site scripting XSS vulnerability in zc/publisher/html.rb in ZoneCheck 2.0.4-13 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the ns parameter to zc.cgi...

CVE-2009-4882

Cross-site scripting XSS vulnerability in zc/publisher/html.rb in ZoneCheck 2.0.4-13 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the ns parameter to zc.cgi...

CVE-2009-4882

Removed by vendor...

CVE-2009-4882

Vulnerability summary (CVE-2009-4882) ZoneCheck CGI (zc.cgi) in ZoneCheck versions 2.0.4-13 and 2.1.0 is affected by a cross-site scripting (XSS) vulnerability due to insufficient input sanitization in the ns parameter to zc.cgi. Exploitation could permit injection of arbitrary script/HTML in the...