EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities

Document Title: =============== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=503 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 503...

EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities

Document Title: =============== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=503 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 503...

[SECURITY] Fedora 17 Update: drupal7-ctools-1.0-1.fc17

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pa ges. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it...

Fedora Update for drupal7-ctools FEDORA-2012-5078

Check for the Version of drupal7-ctools OpenVAS Vulnerability Test Fedora Update for drupal7-ctools FEDORA-2012-5078 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora Update for drupal7-ctools FEDORA-2012-5094

Check for the Version of drupal7-ctools OpenVAS Vulnerability Test Fedora Update for drupal7-ctools FEDORA-2012-5094 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

[SECURITY] Fedora 15 Update: drupal7-ctools-1.0-1.fc15

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pa ges. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it...

[SECURITY] Fedora 16 Update: drupal7-ctools-1.0-1.fc16

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pa ges. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it...

NextBBS 0.6 - ajaxserver.php Multiple SQL Injections

NextBBS 0.6 - ajaxserver.php Multiple SQL Injections source: https://www.securityfocus.com/bid/52728/info NextBBS is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an authentication-bypass vulnerability. Exploiting these vulnerabilities could allow an...

CVE-2012-1781

CVE-2012-1781 affects SocialCMS 1.0.5. The vulnerability is multiple cross-site scripting (XSS) in ajax/commentajax.php, exploitable via the parameters TREF_email_address and TR_name , enabling remote attackers to inject arbitrary web script or HTML. The provided sources confirm the affected comp...

CVE-2012-1781

Multiple cross-site scripting XSS vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 TREFemailaddress or 2 TRname parameters...

Ajax PHP Penny Auction CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Ajax PHP Penny Auction CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/ajax-php-penny-auction-script-software/28039/ Category:: webapps Demo : http://www.vdsdemoajaxphppennyauction.com/admin/...

Netease blog The permission check is not strict cause blog in the encrypted log and the draft disclosure-vulnerability warning-the black bar safety net

Brief description: the vulnerability can cause users to blog in encrypted log friends visible, private, and log the draft leaked. Detailed description: The Netease blog log module of the AJAX request interface via the URL parameter to pass the user level, visitors, friends, bloggers, and not the...

KoolUploader Shell Upload

Exploit Title: KoolUploader - PHP Ajax File Upload - File Upload Vulnerability Date: 01/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: KoolUploader - PHP Ajax File Upload...

Chyrp 2.1.1 - 'ajax.php' HTML Injection

source: https://www.securityfocus.com/bid/52115/info Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal...

CVE-2012-1068

Cross-site scripting XSS vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging...

Cross site scripting

Cross-site scripting XSS vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging...

CVE-2012-1068

The CVE-2012-1068 entry concerns the WP-RecentComments WordPress plugin (before 2.0.7). The vulnerability is an XSS in the rc_ajax function in core.php that allows an attacker to inject arbitrary web script or HTML via the page parameter, related to AJAX paging. Affected component: WordPress WP-R...

CVE-2012-1068

Cross-site scripting XSS vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging...

Multiple XSS in Chyrp

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Chyrp, which can be exploited to perform Cross Site Scripting attacks. 1 Cross Site Scripting XSS in Chyrp: CVE-2012-1001 1.1 Input passed via the "content" POST parameter to /includes/ajax.php is not properly...

Ajax Upload - Arbitrary File Upload

Ajax Upload - Arbitrary File Upload Exploit Title: Ajax Upload Arbitrary File Upload Date: 30/01/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Ajax Upload http://valums.com/ajax-upload/ Tested on: Linux Comment...