WordPress e-Commerce component versions 3.8.4 and below suffer from a remote SQL injection vulnerability.
46fd9bfdf0f43fd77dcc35dcc0a07c44cd29f8484e5661fcfa428a3b99da8140WordPress bSuite component versions 4.0.7 and below suffer from a persistent cross site scripting vulnerability.
702a67d37f8b156f89233911166cb93734573ecaeadf5a3ff89aba3f039a3a2eRed Hat Security Advisory 2011-0949-01 - JBoss Enterprise Application Platform is the market-leading platform for innovative and scalable Java applications. It was found that the fix for CVE-2011-1484 was incomplete: JBoss Seam 2 did not block access to all malicious JBoss Expression Language (EL) constructs in page exception handling, allowing arbitrary Java methods to be executed. A remote attacker could use this flaw to execute arbitrary code via a specially-crafted URL provided to certain applications based on the JBoss Seam 2 framework. Note: A properly configured and enabled Java Security Manager would prevent exploitation of this flaw.
02bb7358730554b78743be49a6ef39f94d62f7657486bc78455a54c2346d328dRed Hat Security Advisory 2011-0948-01 - JBoss Enterprise Application Platform is the market-leading platform for innovative and scalable Java applications. It was found that the fix for CVE-2011-1484 was incomplete: JBoss Seam 2 did not block access to all malicious JBoss Expression Language (EL) constructs in page exception handling, allowing arbitrary Java methods to be executed. A remote attacker could use this flaw to execute arbitrary code via a specially-crafted URL provided to certain applications based on the JBoss Seam 2 framework. Note: A properly configured and enabled Java Security Manager would prevent exploitation of this flaw.
8d76f11458581fec59d2e16dc5e5fffd42e0b1fda8cb4c02b621e8b990b6167cRed Hat Security Advisory 2011-0947-01 - JBoss Enterprise Application Platform is the market-leading platform for innovative and scalable Java applications. It was found that the fix for CVE-2011-1484 was incomplete: JBoss Seam 2 did not block access to all malicious JBoss Expression Language (EL) constructs in page exception handling, allowing arbitrary Java methods to be executed. A remote attacker could use this flaw to execute arbitrary code via a specially-crafted URL provided to certain applications based on the JBoss Seam 2 framework. Note: A properly configured and enabled Java Security Manager would prevent exploitation of this flaw.
3116b34b0d25293f7ef8b8fde4b4b900ed32702488715d1a4f750c947d963debRed Hat Security Advisory 2011-0946-01 - JBoss Enterprise Application Platform is the market-leading platform for innovative and scalable Java applications. It was found that the fix for CVE-2011-1484 was incomplete: JBoss Seam 2 did not block access to all malicious JBoss Expression Language (EL) constructs in page exception handling, allowing arbitrary Java methods to be executed. A remote attacker could use this flaw to execute arbitrary code via a specially-crafted URL provided to certain applications based on the JBoss Seam 2 framework. Note: A properly configured and enabled Java Security Manager would prevent exploitation of this flaw.
31c9513c019d93b02b13f1669fb1727e6fdf3278de596e048449fd67eaf745bfRed Hat Security Advisory 2011-0945-01 - The Enterprise Web Platform is for mid-size workloads, focusing on light and rich Java applications. Web Platform is a slimmed down profile of the JBoss Enterprise Application Platform. This JBoss Enterprise Web Platform 5.1.1 release for Red Hat Enterprise Linux 4, 5, and 6 serves as a replacement for JBoss Enterprise Web Platform 5.1.0. These updated packages include the bug fixes detailed in the release notes, which are linked to from the References section of this erratum. Various other issues were also addressed.
7ef34b7679adcee69bc6985dc3438111903c5e38238a9eda677420f559eddbb6ISPConfig Script suffers from a remote SQL injection vulnerability.
b7bc56bed075dee6d4a5abbf480497f85ad79a2a995a11110c6b7603562d998cThe 6th International Conference for Internet Technology and Secured Transactions (ICITST-2011) Call For Papers has been announced. It will be held December 11th through the 14th, 2011, in Abu Dhabi, UAE.
6b5f240e39bd53a9eb6c98a3bb16bde0419027c433dd9cc474f18cb0505a4544
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed