CVE-2016-9737

CVE-2016-9737 affects IBM TRIRIGA Application Platform versions 3.3, 3.4, and 3.5, which are vulnerable to cross-site scripting via the Web UI, potentially allowing an attacker to inject arbitrary JavaScript and disclose credentials in a trusted session. The IBM Security Bulletin lists affected r...

Atlassian JIRA 7.0.x < 7.0.2 Information Disclosure

Binary data 9737.prm...

CVE-2014-9737

Open redirect vulnerability in the Language Switcher Dropdown module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a block...

CVE-2014-9737

Open redirect in Drupal Language Switcher Dropdown module (7.x-1.x) prior to 7.x-1.4. The module does not validate the redirect URL in the block, allowing attackers to redirect users to arbitrary sites and facilitate phishing. Affected: Drupal 7.x-1.x versions before 7.x-1.4. Mitigation: upgrade ...

SA-CONTRIB-2014-006 - Language Switcher Dropdown - Open Redirect

The Language Switcher Dropdown module enables you to place a block with a convenient drop-down language switcher. After choosing a value the user is redirected to the url of the relevant language. The module doesn't check that the url provided is a valid internal path prior to redirecting. CVE...