CVE-2013-0187

Foreman before 1.1 allows remote authenticated users to gain privileges via a 1 XMLHttpRequest or 2 AJAX request...

Cross site request forgery (csrf)

Foreman before 1.1 allows remote authenticated users to gain privileges via a 1 XMLHttpRequest or 2 AJAX request...

CVE-2013-0187

Foreman before 1.1 contains a privilege escalation vulnerability where remote authenticated users can gain privileges via an XMLHttpRequest or an AJAX request. The connected documents do not specify the root cause, affected components beyond the generic web interface, exploit details, or a remedi...

Cloudflare: User's data leak

Hacker can steal user's data via js callbacks via JSONP. In account panel some user's data returned from server by ajax queries in json and can be stealed by callbacks, https://www.cloudflare.com/ajax/stats/stats2.html?callback=logFunction Vector: 1 Victim should be authorized on cloudflare 2...

Cloudflare: Threat control information leak

The information displayed on the threat control page is retrieved using AJAX calls to the API, however the access token atok which is sent along with the requests is not checked by the receiving end. In addition, a callback function name can be supplied to the API. Combined, these factors allow a...

WordPress Work The Flow Plugin 1.2.1 - Arbitrary File Upload

Work The Flow plugin is prone to an arbitrary file upload vulnerability that submit an image file via the wtf upload panel and intercept the POST request to /wp-admin/admin-ajax.php. Solution Edit the data from the control "acceptfiletypes"...

SA-CORE-2014-002 - Drupal core - Information Disclosure

Drupal's form API has built-in support for temporary storage of form state, for example user input. This is often used on multi-step forms, and is required on Ajax-enabled forms in order to allow the Ajax calls to access and update interim user input on the server. When pages are cached for...

Ajax Pagination (twitter Style) Plugin for WordPress Local File Inclusion

The Ajax Pagination twitter Style plugin for WordPress installed on the remote host is affected by a local file inclusion vulnerability due to a failure to properly sanitize user-supplied input to the 'loop' parameter of the '/wp-admin/admin-ajax.php' script. A remote, unauthenticated attacker ca...

Vulnerability in World Largest Video Site Turned Million of Visitors into DDoS Zombies

An application layer or 'layer 7' distributed denial of service DDoS attacks is one of the most complicated web attack that disguised to look like legitimate traffic but targets specific areas of a website, making it even more difficult to detect and mitigate. Just Yesterday Cloud-based security...

WordPress Ajax Pagination插件'admin-ajax.php'本地文件包含漏洞

Bugtraq ID:66526 WordPress是一款内容管理系统。 由于'admin-ajax.php'脚本没有正确过滤用户提交的输入，攻击者可以利用漏洞包含本地文件，以WEB权限查看系统文件。 0 WordPress Ajax Pagination Plugin 1.1 目前没有详细解决方案： http://wordpress.org/plugins/ajax-pagination/...

Wordpress Ajax Pagination Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file...

WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion

WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file...

WordPress Ajax Pagination Plugin 1.1 - Local File Inclusion

Ajax Pagination plugin is prone to a file inclusion vulnerability. It is exploitable by an unauthenticated user, who can include any local file ending in “.php” which is accessible to the web user. Solution Upgrade the plugin...

WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion

Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file inclusion vulnerability in Ajax Pagination twitter Style 1....

Ajax Pagination 1.1 Local File Inclusion

Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file inclusion vulnerability in Ajax Pagination twitter Style 1....

Design/Logic Flaw

Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered ...

CVE-2014-2339

Multiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 subject or 2 content parameter...

Joomla! AJAX Shoutbox Component "jal_lastID" SQL注入漏洞

Joomla!是一款内容管理系统。 由于通过"jallastID"参数传递到index.php的输入 当"mode"设置为"getshouts"在用于SQL注入前未能正确过滤，攻击者可以利用漏洞通过注入SQL代码操纵SQL查询。 0 AJAX Shoutbox 1.6 component for Joomla! AJAX Shoutbox 1.7版本以修复此漏洞，建议用户下载使用： http://extensions.joomla.org/extensions/communication/shoutbox/43 + Details: - include "helper.php"; -...

Joomla! Component AJAX Shoutbox 1.6 - SQL Injection

Joomla! Component AJAX Shoutbox 1.6 - SQL Injection Joomla AJAX Shoutbox remote SQL Injection vulnerability - Author: Ibrahim Raafat - Contact: https://twitter.com/RaafatSEC - Discovery date: 1 April 2010 4 years ago - Reported to vendor : 12 March 2014 - Response: Quick response from the...

Joomla AJAX Shoutbox <= 1.6 - Remote SQL Injection Vulnerability

Exploit for php platform in category web applications + Details: - include "helper.php"; - parameter: jallastID - Code: 113 $jallastID = JRequest::getVar 'jallastID', 0 ; 114 115 $query = 'SELECT FROM shoutbox WHERE id '.$jallastID.' ORDER BY id DESC'; - Exploit:...