Ajax Chat 1.0 - ajax-chat.php Cross-Site Scripting

Ajax Chat 1.0 - ajax-chat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47953/info Ajax Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Ajax Chat 1.0 - 'ajax-chat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47953/info Ajax Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

CVE-2011-1404

Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with 1 blocktype/myfriends/myfriends.json.php, 2 json/usersearch.php, 3 group/membersearchresults.json.php, or 4...

CVE-2011-1404

Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with 1 blocktype/myfriends/myfriends.json.php, 2 json/usersearch.php, 3 group/membersearchresults.json.php, or 4...

CVE-2011-1404

Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with 1 blocktype/myfriends/myfriends.json.php, 2 json/usersearch.php, 3 group/membersearchresults.json.php, or 4...

CVE-2011-1404

Mahara prior to version 1.3.6 is affected by CVE-2011-1404, where JSON responses exposed more information than necessary in AJAX endpoints (blocktype/myfriends/myfriends.json.php, json/usersearch.php, group/membersearchresults.json.php, json/friendsearch.php). The issue is an information disclosu...

A period of WIN7 under GMAIL MHTML vulnerability test code-vulnerability warning-the black bar safety net

RAyh4c black box Long time no update blog, and turn to a section 7 under the GMAIL MHTML vulnerability test code, finally written the full version of the Don't know to throw which went to the - -! The MHTML vulnerability in WINDOWS 7 to initiate the AJAX request, does not like XP, direct request...

Cross-site Scripting (XSS) Vulnerability in Ajax Chat

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Ajax Chat which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Ajax Chat The vulnerability exists due to input sanitation error in the "chatpath" parameter in...

HTB22973: XSS in AJAX Calendar

Vulnerability ID: HTB22973 Reference: http://www.htbridge.ch/advisory/xssinajaxcalendar.html Product: AJAX Calendar Vendor: OpenCrypt http://www.opencrypt.com Vulnerable Version: 1.0 Vendor Notification: 21 April 2011 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Risk level...

Ajax Calendar 1.0 Cross Site Scripting

Vulnerability ID: HTB22973 Reference: http://www.htbridge.ch/advisory/xssinajaxcalendar.html Product: AJAX Calendar Vendor: OpenCrypt http://www.opencrypt.com Vulnerable Version: 1.0 Vendor Notification: 21 April 2011 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Risk level...

WordPress Plugin WP Ajax Calendar 1.0 - example.php Cross-Site Scripting

WordPress Plugin WP Ajax Calendar 1.0 - example.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47726/info WP Ajax Calendar is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WordPress Plugin WP Ajax Calendar 1.0 - 'example.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47726/info WP Ajax Calendar is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Ajax Category Dropdown Plugin Cross Site Scripting and SQL Injection Vulnerabilities

WordPress Ajax Category Dropdown Plugin is prone to cross site scripting and SQL injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2010-3260

oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms service in Orbeon Forms before 3.9 does not properly restrict DTDs in Ajax requests, which allows remote attackers to read arbitrary files or send HTTP requests to intranet servers via an entity declaratio...

WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting

WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting source: https://www.securityfocus.com/bid/47579/info The WP Ajax Recent Posts WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

HTB22951: XSS in WP-Ajax-Recent-Posts wordpress plugin

Vulnerability ID: HTB22951 Reference: http://www.htbridge.ch/advisory/xssinwpajaxrecentpostswordpressplugin.html Product: WP-Ajax-Recent-Posts wordpress plugin Vendor: QiQiBoY http://www.qiqiboy.com/ Vulnerable Version: 1.0.1 Vendor Notification: 12 April 2011 Vulnerability Type: XSS Cross Site...

WordPress Ajax Recent Posts Plugin 1.0.1 - Cross-Site Scripting

WordPress Ajax Recent Posts plugin's "do" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities

WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities ============================= Vulnerability ID: HTB22946 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectioninajaxcategorydropdownwordpressplugin.html Product: Ajax Category Dropdown wordpress plugin Vendor:...

WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities

============================= Vulnerability ID: HTB22946 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectioninajaxcategorydropdownwordpressplugin.html Product: Ajax Category Dropdown wordpress plugin Vendor: http://www.dyasonhat.com/ http://www.dyasonhat.com/ Vulnerable Version: 0.1.5...

Cross-site Scripting (XSS) Vulnerability in AJAX Calendar

High-Tech Bridge SA Security Research Lab has discovered vulnerability in AJAX Calendar which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in AJAX Calendar The vulnerability exists due to input sanitation error in the "y" parameter in...