XSS vulnerabilities

PMASA-2007-7 Announcement-ID: PMASA-2007-7 Date: 2007-11-11 Summary XSS vulnerabilities Description We received an advisory from Omer Singer, The DigiTrust Group, and we wish to thank him for his work. It was possible to create a malicious database name that contains XSS code. Our team fixed...

CVE-2006-5977

CVE-2006-5977 describes multiple SQL injection vulnerabilities in MultiCalendars, allowing remote attackers to execute arbitrary SQL commands via (1) M or (2) Y in rss_out.asp, or (3) cate in all_calendars.asp. The vector all_calendars.asp/calsids is already covered by CVE-2006-2293. Affected pro...

CVE-2023-5977

CVE-2023-5977 is tied to the Defender Security plugin (WordPress) — Malware Scanner, Login Security & Firewall. It concerns a Masked Login Area Security Feature bypass in versions up to 4.2.0. The issue is listed as Patched with CVSS 5.3 (Medium).