Skip to content
OpenAdvisories

Archive

June 2008

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Medium —

    Mercurial Directory traversal vulnerability

    Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

  • Medium —

    TYPO3 Unrestricted File Upload vulnerability

    TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or con…

  • Medium —

    Apache Tomcat Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.