209 matches found
MediaWiki 'formatHTML'函数跨站脚本漏洞
BUGTRAQ ID：65906 CVE ID：CVE-2014-2244 MediaWiki是一款Wiki程序。 MediaWiki中的includes/api/ApiFormatBase.php脚本的'formatHTML'函数存在跨站脚本漏洞。由于程序未能正确处理追加到api.php脚本的链接，远程攻击者可利用该漏洞注入任意Web脚本或HTML。 0 MediaWiki Mediawiki 2.0.18 MediaWiki Mediawiki = 1.19.11 MediaWiki Mediawiki 1.20.x MediaWiki Mediawiki 1.21.x1.21.6...
Saia PCD < 1.22 Multiple Vulnerabilities
Saia PCD is prone to a vulnerability in the user authentication. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
Geany <=1.22 Local Code injection Vulnerability
Geany version Compile Or the shortcut F8, injected code ready. Examples: xpl.c";ls -la" xpl.c";cat /etc/passwd" 0day.today 2018-04-10...
JVN#58160713: MyWebSearch vulnerable to cross-site scripting
MyWebSearch is a CGI script for searching within a website. MyWebSearch contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the...
CVE-2012-1110
Multiple cross-site scripting XSS vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 email, 3 email2, 4 f17zip, or 5 agree parameter to join.php; 6 PATHINFO, 7 st, 8 f17city, 9 f17country, 10 f17state, 11 f17zip, 12 f19, 13...
CVE-2012-1110
CVE-2012-1110 describes multiple cross-site scripting (XSS) flaws in Etano 1.22 and earlier. The vulnerabilities affect the web application via a large set of input points: join.php parameters (user, email, email2, f17_zip, agree); search.php parameters (PATH_INFO, st, f17_city, f17_country, f17_...
Etano 1.201.22 - photo_search.php Multiple Cross-Site Scripting Vulnerabilities
Etano 1.201.22 - photosearch.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52295/info Etano is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues t...
ZAPms 1.22 - 'nick' SQL Injection
source: https://www.securityfocus.com/bid/47782/info ZAPms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...
ColdBookmarks 1.22 SQL Injection
ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...
ColdBookmarks 1.22 SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================== ColdBookmarks 1.22 SQL Injection Vulnerability ============================================== ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/...
ColdBookmarks 1.22 - SQL Injection
ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...
ColdBookmarks 1.22 - SQL Injection
ColdBookmarks 1.22 - SQL Injection ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...
HeffnerCMS 1.22 - index.php Local File Inclusion
HeffnerCMS 1.22 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/43006/info HeffnerCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...
CVE-2010-0012
Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. dot dot in a pathname within a .torrent file...
CVE-2006-7184
Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine EE 1.22, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to 1 fetchsettings.php or 2 fstyles.php. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-6262
Directory traversal vulnerability in mboard.php in PHPJunkYard aka Klemen Stirn MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. dot dot in the origid parameter...
CVE-2006-6262
CVE-2006-6262 describes a directory traversal in PHPJunkYard’s MBoard 1.22 and earlier, where an attacker can exploit the orig_id parameter to create arbitrary empty files. Affected product: PHPJunkYard MBoard (Klemen Stirn) up to version 1.22. The vulnerability is rooted in the orig_id handling,...
MHL-2006-003 Public Advisory: "mboard" file creation issue
MHL-2006-004 - Public Advisory +-----------------------------------------------------------+ | mboard Security Issue | +-----------------------------------------------------------+ PUBLISHED ON November 26th, 2006 PUBLISHED AT http://www.mayhemiclabs.com/advisories/MHL-2006-004.txt...
Exhibit Engine 1.22 - fstyles.php?toroot Remote File Inclusion
Exhibit Engine 1.22 - fstyles.php?toroot Remote File Inclusion source: https://www.securityfocus.com/bid/20793/info Exhibit Engine Software is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allo...