CVE-2011-5200

CVE-2011-5200 : The connected documents confirm multiple SQL injection vulnerabilities in DeDeCMS up to version 5.6/5.7, exploitable via the id parameter in the files list.php , members.php , and book.php . The root cause is unsanitized input allowing remote attackers to execute arbitrary SQL com...

CVE-2011-5199

The CVE-2011-5199 entry describes a Cross-site Scripting (XSS) vulnerability in the TinyGuestbook project, specifically in sign.php where the msg parameter can be exploited to inject arbitrary web script or HTML. The available sources consistently identify the vulnerable component as sign.php wit...

CVE-2011-5191

CVE-2011-5191 describes an XSS vulnerability in the Pretty Link Lite WordPress plugin, specifically in the pretty-bar.php code path. The flaw allows remote attackers to inject arbitrary web script or HTML via the slug parameter in versions prior to 1.5.4. This is a distinct vulnerability from CVE...

CVE-2011-5191

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192...

CVE-2011-5197

Public Knowledge Project Open Harvester Systems (PKP OHS) versions 2.3.1 and earlier are affected by a CSRF vulnerability in index/manager/fileUpload that allows remote attackers to hijack administrator authentication when uploading PHP files. The description specifies the affected component and ...

CVE-2011-5201

CVE-2011-5201 affects the tinyguestbook application via sign.php, where there are concrete SQL injection vulnerabilities in the (1) name and (2) msg parameters. The underlying cause is unsanitized input leading to arbitrary SQL execution, enabling remote attackers to manipulate the database. Publ...

CVE-2011-5192

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

CentOS Update for libxml2 CESA-2012:1288 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libxml2 CESA-2012:1288 centos5

Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2012:1288 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for java-1.6.0-openjdk FEDORA-2012-13127

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for wordpress FEDORA-2012-13412

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Important: libxslt

Issue Overview: A heap-based buffer overflow flaw was found in the way libxslt applied templates to nodes selected by certain namespaces. An attacker could use this flaw to create a malicious XSL file that, when used by an application linked against libxslt to perform an XSL transformation, could...

Fedora Update for java-1.6.0-openjdk FEDORA-2012-13127

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.6.0-openjdk FEDORA-2012-13127 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2011-5189

Cross-site scripting XSS vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with permissions to "update Webform nodes" to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5179

Cross-site scripting XSS vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the 1 node parameter to nnm/mibdiscover; 2 nodename parameter to nnm/protected/configurationpoll.jsp, 3 nnm/protected/ping.jsp, 4...

CVE-2011-5178

Infoblox NetMRI is affected by CVE-2011-5178: multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf, exploitable via the (1) eulaAccepted or (2) mode parameter. Affected: NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier. Root cause is input handling in the login page ...

CVE-2011-5179

CVE-2011-5179 describes a Cross-Site Scripting (XSS) vulnerability in the Skysa App Bar Integration plugin for WordPress, specifically in skysa-official/skysa.php and affecting the plugin up to and possibly before version 1.04. Exploitation involves injection via the submit parameter, allowing re...

CVE-2011-5189

CVE-2011-5189 affects Drupal's Webform Validation module (versions 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1). The vulnerability is a cross-site scripting (XSS) flaw that can be triggered by remote authenticated users who have permission to update Webform nodes, allowing them to inject ar...

CVE-2011-5187

The CVE-2011-5187 entry describes a Cross-site scripting (XSS) flaw in Drupal’s Support Ticketing System module (6.x-1.x) prior to 6.x-1.7. The vulnerability allows remote authenticated users with the 'administer support projects' permission to inject arbitrary web script or HTML via unspecified ...