keycloak: Default Client configuration is vulnerable to SSRF using "request_uri" parameter

A flaw was found in Keycloak, where it is possible to force the server to call out an unverified URL using the OIDC parameter requesturi. This flaw allows an attacker to use this parameter to execute a Server-side request forgery SSRF attack...

CVE-2020-10770

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter requesturi. This flaw allows an attacker to use this parameter to execute a Server-side request forgery SSRF attack...

CVE-2020-10770

A flaw was found in Keycloak, where it is possible to force the server to call out an unverified URL using the OIDC parameter requesturi. This flaw allows an attacker to use this parameter to execute a Server-side request forgery SSRF attack...

CVE-2011-5018

Koala Framework before 2011-11-21 has XSS via the requesturi parameter...

Design/Logic Flaw

Koala Framework before 2011-11-21 has XSS via the requesturi parameter...

CVE-2011-5018

Koala Framework before 2011-11-21 has XSS via the requesturi parameter...

CVE-2011-5018

Koala Framework is affected by a Cross-Site Scripting (XSS) vulnerability via the request_uri parameter in versions prior to 2011-11-21. The root cause, as described across multiple sources, is insufficient validation/ sanitization of client-side data. Impact is described as XSS, with no explicit...

CVE-2018-17039

MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $SERVER'REQUESTURI' is mishandled...

Cross-Site Scripting (XSS)

silverstripe/framework is vulnerable to cross-site scripting XSS attacks. These attacks are possible because the REQUESTURI parameter is not sanitized properly, allowing the attackers to insert arbitrary Javascript which gets executed by the browser...

Information Disclosure And Open Redirect

drupal/core is vulnerable to information disclosure and open redirect attacks. The attacks exist due to a flaw in requesturi code in FormBuilder.php, allowing a malicious user to redirect a user or sensitive data to a malicious website...

Automattic: woocommerce - prevent_caching() bug / bypass

As guest visit the following links and look at the headers. Yup there are not caching headers in the response. https://woocommerce.com/.cart/https://woocommerce.com/.cart/ https://woocommerce.com/+cart/https://woocommerce.com/+cart/ https://woocommerce.com/-cart/https://woocommerce.com/-cart/...

CVE-2016-5114

sapi/fpm/fpm/fpmlog.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read and buffer overflow via a long...

WordPress 2.2 Request_URI Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24383/info WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Nginx security vulnerability (CVE-2 0 1 3-4 5 4 7)-vulnerability warning-the black bar safety net

Nginx security restrictions might be some requests to ignore, when we for example, by the following manner for URL access restrictions, if an attacker uses some didn't after the escaped space character invalid HTTP Protocol, but from the Nginx 0.8.41 start considering compatibility issues to be...

$_GET not cleaned when parsed from REQUEST_URI

When none of the default methods of determining the request URI have succeeded, the framework will fallback to parsing the raw request URI as passed by the webserver. If this URI has a query string, it will be parsed and $GET will be updated. In this process, the $GET variables are not cleaned,...

reflected xss in the pageId request parameter in 500page.jsp

A scanner picked up that the pageId parameter in 500page.jsp is a potentially reflected xss bug. This can be exploited through a url like the following: https://example.com/pages/viewtrash.vm;editpage?pageId=%22%3E%3Cscript%3Ealert1%3C/script%3E code /images/icons/emoticons/warning.png" You can...

phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities

This host is running phpBugTracker and is prone to multiple reflected cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpbugtrackermultiplexss.nasl 7029 2017-08-31 11:51:40Z teissa $ phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities Authors: Antu...

CVE-2007-5589

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

CVE-2007-5589

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

CVE-2007-3328

Multiple cross-site scripting XSS vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 modulekey parameter to a kb/kb.php, b quiz/runquiz.php, c quiz/quiz.php, d forum/forum.php, e forum/byname.php, and f journal/journalview.php in modules...