54 matches found
CVE-2011-5304
Multiple cross-site scripting XSS vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via 1 the pollid parameter to customizer.php or 2 the customize parameter to poll.php...
CVE-2011-5304
The CVE-2011-5304 issue involves the WordPress Sodahead Polls plugin before version 2.0.4, where multiple XSS vulnerabilities allow remote injection via poll_id in customizer.php or via customize in poll.php. The root cause is input handling flaws leading to script/HTML injection; impact is typic...
Fedora Update for libvncserver FEDORA-2014-11541
Check the version of libvncserver SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868357";...
Fedora Update for libvncserver FEDORA-2014-11537
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : libvncserver-0.9.10-0.6.20140718git9453be42.fc21 (2014-11685)
Various security fixes, including CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...
CVE-2013-5304
The CVE-2013-5304 vulnerability affects the TYPO3 extension Store Locator (locator) with version prior to 3.1.5. The issue is a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected extension versions were identified in TYPO3 security bulle...
CVE-2012-5304
Summary: CVE-2012-5304 refers to a static code injection vulnerability in the YVS Image Gallery, specifically in administration/install.php, allowing remote attackers to inject arbitrary PHP code into functions/db_connect.php via unspecified vectors. The vulnerability is noted to occur when admin...
SuSE 10 Security Update : xine (ZYPP Patch Number 5304)
Specially crafted NSF files could potentially be exploited to execute arbitrary code. CVE-2008-1878 Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security,...
RealVNC 4.1.3 'ClientCutText' Message Remote Denial of Service Vulnerability
RealVNC Viewer is prone to a remote denial-of-service vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
phpMyAdmin < 2.11.10 Multiple Vulnerabilities
Binary data 5304.prm...
FreeBSD Ports: twiki
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-5304
TWiki is affected by CVE-2008-5304: a cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable. Affected product/version: TWiki
CVE-2007-5304
CVE-2007-5304 affects ELSEIF CMS Beta 0.6. The vulnerability is multiple cross-site scripting (XSS) weaknesses that allow remote attackers to inject arbitrary web script or HTML via three parameters in PHP scripts: repertimage (utilisateurs/vousetesbannis.php), elseifvotetxtresultatduvote (utilis...