CVE-2013-3945

creationtimestamp| type| source ---|---|--- 2020-01-02 22:49:09+00:00| seen| https://t.me/cibsecurity/8962 2020-01-09 00:32:31+00:00| seen| https://t.me/cibsecurity/9050...

CVE-2013-0737

Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...

CVE-2013-3620

creationtimestamp| type| source ---|---|--- 2020-01-02 20:49:17+00:00| seen| https://t.me/cibsecurity/8954...

CVE-2013-4752

creationtimestamp| type| source ---|---|--- 2020-01-02 20:49:15+00:00| seen| https://t.me/cibsecurity/8952...

CVE-2013-1420

GetSimple CMS before 3.2.1 has multiple XSS weaknesses allowing remote injection of script/HTML via: (1) id in backup-edit.php; (2) title or (3) menu in edit.php; or (4) path or (5) returnid in filebrowser.php under admin/. Note: path in admin/upload.php is covered by CVE-2012-6621. No public det...

CVE-2013-1420

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to backup-edit.php; 2 title or 3 menu parameter to edit.php; or 4 path or 5 returnid parameter to filebrowser.php in admin/. NOTE: t...

CVE-2013-1642

QuiXplorer (before 2.5.5) is affected by multiple XSS vulnerabilities. The issue enables remote attackers to inject arbitrary web script or HTML via parameters (dir, item, order, searchitem, selitems[], srt) to index.php or via QUERY_STRING. Impact includes possible client-side script execution; ...

CVE-2013-1642

Multiple cross-site scripting XSS vulnerabilities in QuiXplorer before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 dir, 2 item, 3 order, 4 searchitem, 5 selitems, or 6 srt parameter to index.php or 7 the QUERYSTRING to index.php...

CVE-2013-3932

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

CVE-2013-3931

Cross-site scripting XSS vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via the propertyname parameter, related to editing property details...

CVE-2013-0737

The CVE-2013-0737 entry describes an XSS vulnerability in BoltWire 3.5 and earlier. Affected software: BoltWire versions up to 3.5. The vulnerability is triggered via the fieldnames parameter, enabling remote attackers to inject arbitrary web script or HTML. The documented impact is cross-site sc...

CVE-2013-0737

Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...

CVE-2013-7351

CVE-2013-7351 corresponds to multiple XSS flaws in Shaarli’s index.php. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML by crafting the URL for: (1) showRSS, (2) showATOM, (3) showDailyRSS; (4) a file name to importFile; or (5) vectors related to bookmarks. Conne...

CVE-2013-3246

CVE-2013-3246 describes a stack-based buffer overflow in XnView’s xnview.exe affecting XnView versions earlier than 2.03. An attacker can trigger arbitrary code execution by supplying a crafted XCF image layer, exploiting the stack overflow in the XCF image handling. Connected sources (NVD/Nessus...

CVE-2013-3247

CVE-2013-3247 is a heap-based buffer overflow in XnView (xnview.exe) prior to 2.03. It can be triggered by a crafted RLE-compressed layer in an XCF file, allowing remote code execution on the affected host. Remediation: upgrade to XnView 2.03 or later (as specified). Exploit details beyond the de...

CVE-2013-3932

CVE-2013-3932 affects the Jomres (com_jomres) Joomla! extension before 7.3.1. The flaw allows remote authenticated users with the Business Manager permission to inject SQL via the id parameter in an editProfile action to administrator/index.php, enabling arbitrary SQL execution and potential data...

CVE-2013-3931

The CVE-2013-3931 issue affects the Joomla! Joomla extension Jomres (com_jomres) before version 7.3.1. The vulnerability is a cross-site scripting (XSS) flaw in the property_name parameter used during editing property details, exploitable by remote authenticated users who have the Business Manage...

CVE-2013-7062

Multiple cross-site scripting XSS vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the 1 browseridmanager or 2...

CVE-2013-3944

Stack-based buffer overflow in the MrSID plugin MrSID.dll before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag...

Cross site scripting

Cross-site scripting XSS vulnerability in the backend in Open-Xchange OX AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or HTML via the body of an email. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects...