CVE-2013-7171

CVE-2013-7171 affects Slackware 14.0/14.1 and Slackware LLVM 3.0-i486-2, 3.3-i486-2, where world-writable /tmp permissions could let a remote attacker execute arbitrary code with root privileges. Root cause identified as improper /tmp directory permissions; no specific patch/version or remediatio...

CVE-2013-1816

MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service application crash by sending a specially crafted request...

CVE-2013-2093

Dolibarr ERP/CRM 3.3.1 is affected by CVE-2013-2093 due to improper validation of user input in viewimage.php and barcode.lib.php, enabling remote attackers to execute arbitrary commands. The cited vulnerability is rated as high/critical under the CVSS metrics (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C...

CVE-2013-2092

Cross-site Scripting XSS in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php...

CVE-2013-2092

CVE-2013-2092: Dolibarr ERP/CRM 3.3.1 contains a Cross‑Site Scripting (XSS) in functions.lib.php that allows remote attackers to inject arbitrary web script or HTML. Root cause is a lack of input sanitization in that library file. Impact per sources is limited to XSS on affected pages; exploitati...

CVE-2013-2091

CVE-2013-2091 affects Dolibarr ERP/CRM 3.3.1 with a SQL injection via the pays parameter in fiche.php. The root cause is unsanitized input in that parameter, enabling remote attackers to execute arbitrary SQL commands. Documented impact is high/critical depending on CVSS vector, with potential ex...

CVE-2013-1817

CVE-2013-1817 affects MediaWiki prior to 1.19.4 and 1.20.x prior to 1.20.3. The vulnerability is in the api.php script and leads to an information disclosure where remote attackers can obtain sensitive information. The OSV and NVD records confirm the affected versions and the nature of the impact...

CVE-2013-1816

MediaWiki prior to 1.19.4 and 1.20.x prior to 1.20.3 is affected by a denial-of-service vulnerability: remote attackers can cause an application crash by sending a specially crafted request. Affected components are the MediaWiki core up to those versions. The underlying issue is a DoS condition t...

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

CVE-2013-0194

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

Cross site scripting

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

Cross site scripting

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

CVE-2013-0195

The CVE-2013-0195 entry corresponds to a Cross-site Scripting (XSS) vulnerability in Matomo/Piwik prior to version 1.10.1. Connected sources attribute the issue to improper validation of client-side data, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Th...

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

CVE-2013-0194

CVE-2013-0194 is an XSS vulnerability in Matomo (formerly Piwik) before 1.10.1. The flaw allows remote attackers to inject arbitrary JavaScript/HTML via unspecified vectors, potentially impacting user sessions and data integrity. Multiple connected sources (CNVD entries and related CVEs) corrobor...

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

CVE-2013-0193

CVE-2013-0193 describes a cross-site scripting (XSS) vulnerability in Piwik/Matomo prior to version 1.10.1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue is cited as a distinct vulnerability from CVE-2013-0194 and CVE-2013-0195. Exploit...