CVE-2013-3261

Cross-site scripting XSS vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action...

CVE-2013-3261

CVE-2013-3261 affects the WordPress GRAND FlAGallery plugin, specifically versions before 2.72. The vulnerability is a reflected XSS in wp-admin/admin.php where an attacker can inject arbitrary script/HTML through the s parameter in a flag-manage-gallery action. The issue is caused by insufficien...

[security bulletin] HPSBMU02815 SSRT100715 rev.3 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03489683 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03489683 Version: 3 HPSBMU02815...

CVE-2012-3261

CVE-2012-3261 affects HP SiteScope versions 11.10–11.12, where a vulnerable SOAP call using APIPreferenceImpl enables remote code execution. The SAINT entries describe a Security Bypass/Remote Code Execution path via the SOAP API, with HP confirming vulnerable versions and recommending upgrading ...

CVE-2011-3261

CVE-2011-3261 is a double-free vulnerability in OfficeImport on Apple iOS, affecting OfficeImport’s handling of Excel files and leading to arbitrary code execution or a denial of service (app crash) when processing crafted Excel spreadsheets. The issue is rooted in a memory-management error (doub...

CVE-2010-3261

The CVE-2010-3261 entry covers a directory traversal in RSA Authentication Agent 7.0 before P2 for Web that could allow remote reading of unspecified data. The exact attack vectors, affected components, and impact details are not disclosed in the provided documents. No remediation or patch inform...

CVE-2009-3261

update/update0.1.2to0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors...

CVE-2009-3261

CVE-2009-3261 affects LiveStreet 0.2, where update/update_0.1.2_to_0.2.php does not require administrative authentication, enabling remote attackers to trigger DROP TABLE operations via unspecified vectors. Root cause is missing admin auth for the vulnerable update script. Documents do not provid...

AST-2009-003: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | SIP responses expose valid usernames |...

CVE-2008-3261

Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2008-3261

The CVE-2008-3261 item concerns Claroline, where the redirector.php component in Claroline before 1.8.10 is vulnerable to an open redirect via the url parameter. This allows remote attackers to redirect users to arbitrary external sites, enabling phishing scenarios. Affected software is Claroline...

CVE-2008-3261

creationtimestamp| type| source ---|---|--- 2008-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32071...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using an empty packet

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 using an empty packet Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH10 Synopsis After sending an empty message the device looks functional but in fact does not respond to any event provoking a Do...

[Full-disclosure] DOS vulnerability on Thomson SIP phone ST 2030 using the TO Header

MADYNES Security Advisory : Remote DOS on Thomson SIP phone ST 2030 Date of Discovery 15 February, 2007 Vendor was notified on 1 March 2007 ID: KIPH9 Synopsis After sending a message where the TO URI field is crafted, the device looks functional but in fact does not respond to any event provoking...

CVE-2007-3261

CVE-2007-3261 affects dKret widgets/widget_search.php, with the vulnerable component being the search widget in dKret before version 2.6. The issue is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Connected docu...

CVE-2007-3261

Cross-site scripting XSS vulnerability in widgets/widgetsearch.php in dKret before 2.6 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2006-3261

CVE-2006-3261 affects Trend Micro Control Manager (TMCM) 3.5. The vulnerability is a cross-site scripting (XSS) flaw in the login page: the username field is not properly sanitized and its value may be reflected in the error log, enabling remote attackers to inject arbitrary web script or HTML. T...

CVE-2005-3261

getversions.php in versatileBulletinBoard vBB 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-3261

getversions.php in versatileBulletinBoard vBB 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-3261

CVE-2005-3261 affects versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerability is in getversions.php, which unintentionally lists the versions of all installed scripts and can be triggered by a direct remote request. This leads to information disclosure of installed components. The provided docu...