41 matches found
Liferay Portal 7.1 CE GA=3 / SimpleCaptcha API - Cross-Site Scripting
Exploit Title: Liferay Portal ” / or ” /. A customized Liferay portlet which directly calls the Simple Captcha API without sanitizing the input could be susceptible to this vulnerability. Poc In a sample scenario of custom code calling the ” / JSP taglib, appending a payload like the following to...
Liferay Portal 7.1 CE GA3 SimpleCaptcha API - Cross-Site Scripting
Liferay Portal 7.1 CE GA3 SimpleCaptcha API - Cross-Site Scripting Exploit Title: Liferay Portal ” / or ” /. A customized Liferay portlet which directly calls the Simple Captcha API without sanitizing the input could be susceptible to this vulnerability. Poc In a sample scenario of custom code...
CVE-2019-6588
In CVE-2019-6588, Liferay Portal versions prior to 7.1 CE GA4 are vulnerable via the SimpleCaptcha API. The XSS occurs when unsanitized input is passed into the url parameter of the JSP taglibs or . Liferay Portal out-of-the-box behavior with no customizations is not vulnerable. The vulnerabilit...
CVE-2018-6588
CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to the apiExplorer...
CVE-2018-6588
CVE-2018-6588 affects the CA API Developer Portal, specifically versions 3.5 up to and including 3.5 CR5. The vulnerability is a reflected cross-site scripting (XSS) flaw in the apiExplorer component, caused by improper handling of user-supplied HTML code, allowing an attacker to execute arbitrar...
CVE-2015-6588
CVE-2015-6588 affects MODX Revolution with an XSS in login-fsp.html (pre-1.9.1). The underlying issue is that the QUERY_STRING is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML. Practical impact is user interaction is not required, but the attack occurs via craf...
CVE-2015-6588
Cross-site scripting XSS vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...
CVE-2013-6588
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-6588
CVE-2014-6588 is an unspecified local vulnerability in Oracle VM VirtualBox (VMSVGA) present in VirtualBox before 4.3.20. The issue affects integrity and availability via the VMSVGA graphics device and is listed among related CVEs (e.g., 2014-6589, 2014-6590, 2014-6595, 2015-0427). Public referen...
Multiple Vulnerabilities with Aztech Modem Routers
PRODUCT DESCRIPTION The Aztech ADSL family of modems/routes are shipped to residential and SOHO users that desires speed from 150-300mbps rate. This modem/router also supports IEEE802.11b/g/n as a Wireless LAN Access point. The vulnerable model numbers are: DSL5018EN 1T1R Shipped with Globe Telec...
CVE-2012-6588
SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2012-6588
The vulnerability CVE-2012-6588 affects the MYRE Business Directory product, specifically the links.php component. The issue is a SQL injection in the cat parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents do not specify affected versions, build detail...
CVE-2012-6588
creationtimestamp| type| source ---|---|--- 2012-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22711...
Fedora Update for dokuwiki FEDORA-2012-6588
Check for the Version of dokuwiki OpenVAS Vulnerability Test Fedora Update for dokuwiki FEDORA-2012-6588 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2007-6588
The provided records indicate a Cross-site scripting (XSS) vulnerability in PHCDownload 1.10, exploitable via the username field in an unspecified component. Affected software: PHCDownload 1.10. Root cause: inadequate sanitization of the username input leading to script/HTML injection. Impact: po...
CVE-2006-6588
The forum implementation in the ecommerce component in the Apache Open For Business Project OFBiz trusts the 1 dataResourceTypeId, 2 contentTypeId, and certain other hidden form fields, which allows remote attackers to create unauthorized types of content, modify content, or have other unknown...
CVE-2006-6588
CVE-2006-6588 affects the Apache OFBiz OFBiz forum component, where the forum implementation trusts certain hidden form fields (dataResourceTypeId and contentTypeId) to process content. This trust allows remote attackers to create unauthorized content types, modify content, or cause other unknown...
CVE-2003-0410
Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588...
CVE-2003-0410
The CVE-2003-0410 entries describe a buffer overflow in AnalogX Proxy 4.13 that could allow remote code execution when a long URL is sent to port 6588. This is supported by the NVD entry (Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to por...