CVE-2013-5978

Multiple cross-site scripting XSS vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Product name or 2 Price description fields via a request to wp-admin/admin.php. NOTE: This issue may on...

CVE-2013-5978

CVE-2013-5978 : In the WordPress Cart66 Lite plugin (affected version: before 1.5.1.15), multiple XSS vulnerabilities exist in the products.php functionality. Remote attackers can inject arbitrary web script or HTML via the 1) Product name or 2) Price description fields in requests to wp-admin/ad...

CVE-2019-5978

Open redirect vulnerability (CVE-2019-5978) in Cybozu Garoon Scheduler affects Cybozu Garoon 4.0.0 to 4.10.2. An attacker can redirect users to arbitrary websites via a crafted URL, enabling phishing risks. Root cause: open redirect in Scheduler. Impact is limited to user redirection; no other co...

JVN#62618482: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. DOM-based cross-site scripting in the application "Portal" CWE-79 - CVE-2019-5975 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.4 CVSS v2|...

CVE-2018-5978

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...

CVE-2018-5978

CVE-2018-5978 affects Zechat 1.5 (Facebook Style Php Ajax Chat). A SQL injection exists in login.php User field, enabling arbitrary SQL commands through the login form. Public references (Exploit-DB, ExploitPack, CNVD) describe a remote attacker exploiting input to inject queries, with CVSS metri...

Zechat 1.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Style Php Ajax Chat - Zechat 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/facebook-style-php-ajax-chat-zechat/16491266 Version: 1.5...

Zechat 1.5 - SQL Injection

Exploit Title: Facebook Style Php Ajax Chat - Zechat 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/facebook-style-php-ajax-chat-zechat/16491266 Version: 1.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Zechat 1.5 - SQL Injection

Zechat 1.5 - SQL Injection Exploit Title: Facebook Style Php Ajax Chat - Zechat 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/facebook-style-php-ajax-chat-zechat/16491266 Version: 1.5 Category: Webapps Tested on:...

[ASA-201801-17] zziplib: denial of service

Arch Linux Security Advisory ASA-201801-17 ========================================== Severity: Medium Date : 2018-01-18 CVE-ID : CVE-2017-5977 CVE-2017-5978 Package : zziplib Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-273 Summary ======= The package zziplib...

[SECURITY] [DLA 994-1] zziplib security update

Package : zziplib Version : 0.13.56-1.1+deb7u1 CVE ID : CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981 CVE-2017-5974 Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib allows remote attackers to cause a denial of service...

Debian DSA-3878-1 : zziplib - security update

Agostino Sarubbo discovered multiple vulnerabilities in zziplib, a library to access Zip archives, which could result in denial of service and potentially the execution of arbitrary code if a malformed archive is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2015-5978

...

CVE-2015-5978

CVE-2015-5978 is rejected/not used and does not represent an active vulnerability entry.

openSUSE Security Update : zziplib (openSUSE-2017-554)

This update for zziplib fixes the following issues : Secuirty issues fixed : - CVE-2017-5974: heap-based buffer overflow in zzipget32 fetch.c bsc1024517 - CVE-2017-5975: heap-based buffer overflow in zzipget64 fetch.c bsc1024528 - CVE-2017-5976: heap-based buffer overflow in zzipmementryextrabloc...

CVE-2017-5978

CVE-2017-5978 affects zziplib 0.13.62; the zzip_mem_entry_new function in memdisk.c allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file. Upstream fixes exist in 0.13.67 and several distros patched to mitigate, e.g., Debian, Arch, Mageia.

CVE-2016-5978

IBM Tealeaf Customer Experience Web UI is affected by an XSS vulnerability (CVE-2016-5978) in the IBM Tealeaf portal. The issue allows remote authenticated users to inject arbitrary JavaScript/HTML via an embedded string in the Web UI. Affected software ranges include Tealeaf CX versions before 8...

CVE-2014-5978

The memetan Android app (package memetan.android.com.activity, version 1.1.0) does not verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Connected sources (NVD, PRION, CVE lists) confirm t...

CVE-2013-5978

creationtimestamp| type| source ---|---|--- 2013-10-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28959 2024-03-10 11:07:25+00:00| seen| https://t.me/ctinow/204210...

VMware View critical directory traversal vulnerability

DDI Vulnerability Research Team VRT for reported a critical vulnerability in VMware View Server , that is a directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive...