CVE-2013-4556

Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...

CVE-2013-4557

CVE-2013-4557 affects SPIP’s Security Screen component (core /securite/ecran_securite.php) prior to version 1.1.8, used in SPIP 3.0.x before 3.0.12. It allows remote attackers to execute arbitrary PHP via the connect parameter, leading to remote code execution. The vulnerability is documented acr...

DEBIAN-CVE-2012-1098

Cross-site scripting XSS vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods...

DEBIAN-CVE-2012-1099

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formoptionshelper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain...

Fedora 10 : Miro-2.0.5-2.fc10 / blam-1.8.5-12.fc10 / devhelp-0.22-10.fc10 / epiphany-2.24.3-8.fc10 / etc (2009-7961)

Update to new upstream Firefox version 3.0.12, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox30.htmlfirefox3.0.12 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

Mozilla Firefox Multiple Vulnerabilities July-09 (Windows)

The host is installed with Firefox browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulnjul09win.nasl 5055 2017-01-20 14:08:39Z teissa $ Mozilla Firefox Multiple Vulnerabilities July-09 Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod...

Mozilla Firefox Remote Code Execution Vulnerabilities (Jul 2009) - Windows

Firefox browser is prone to Remote Code Execution vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Remote file inclusion

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2008-2296

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2008-2296

CVE-2008-2296 describes a PHP remote file inclusion vulnerability in Rgboard 3.0.12, specifically in the include/bbs.lib.inc.php file. The root cause is a vulnerable handling of the site_path parameter, allowing an attacker to supply a URL that causes arbitrary PHP code execution on the server. T...

CVE-2008-2295

Cross-site scripting XSS vulnerability in rgsearch.php in Rgboard 3.0.12, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the stext parameter and other unspecified vectors...

CVE-2008-2296

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

Rgboard <= 3.0.12 (RFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Rgboard // Vulnerable code,line 22: \include\bbs.lib.inc.php if !defined’BBSLIBINCINCLUDED’ define’BBSLIBINCINCLUDED’, 1; // start of include,eh? if!$sitepath...

rgboard 3.0.12 - Remote File Inclusioni Cross-Site Scripting

rgboard 3.0.12 - Remote File Inclusioni Cross-Site Scripting Rgboard 3.0.x Multiple Vulnerabilities RFI/XSS // Author:: e.wiZz! // Site:: www.balcanwarez.com // Contact:: N/A :D =========================================================== // Script :: Rgboard // Vulnerable version :: 3.0.0/3.0.12 ...

CubeCart < 3.0.12 Multiple Vulnerabilities (SQLi, XSS)

The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to several parameters and scripts before using it in database queries and to generate dynamic web content. An unauthenticated attacker may be able to exploit these issues to conduct SQL injection a...

vBulletin 3.03.5 - profile.php?Email HTML Injection

vBulletin 3.03.5 - profile.php?Email HTML Injection source: https://www.securityfocus.com/bid/16919/info vBulletin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated...