396 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 search field, or the 2 Author or 3 selectsort parameters in an advanced search...
Sql injection
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the 1 selectsort or 2 optsearchselect parameters. NOTE: this issue could not be reproduced by third parties...
CVE-2012-2099
CVE-2012-2099 concerns Wikidforum 2.10 with multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the advanced search interface: (1) search field, (2) Author, or (3) select_sort parameters. The NVD entry lists a Medium se...
CVE-2012-2099
Multiple cross-site scripting XSS vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 search field, or the 2 Author or 3 selectsort parameters in an advanced search...
Ask.com UK Cross Site Scripting
Exploit Title: ASK UK XSS Date: 11.03.2013 Author: TayfunBasoglu Tested: BackTrack 5 Platform: asp ------------------------------------------------------------------...
CVE-2012-5480
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search...
CVE-2012-5480
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search...
Design/Logic Flaw
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search...
CVE-2012-5473
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a different group's users via an advanced search...
CVE-2012-5480
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search...
CVE-2012-5480
The Moodle Database activity module (versions 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3) allows remote attackers to bypass restrictions on reading other participants’ entries via an advanced search, resulting in information disclosure. Root cause: insufficient enforcement of ...
CVE-2012-5473
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a different group's users via an advanced search...
[SECURITY] Fedora 17 Update: phpldapadmin-1.2.2-3.gitbbedf1.fc17
PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...
Knowledge Base EE v4.62.0 - SQL Injection Vulnerability
Document Title: =============== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=700 Release Date: ============= 2012-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 700...
CVE-2012-3398
Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...
UBUNTU-CVE-2012-3398
Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...
CVE-2012-3398
CVE-2012-3398 describes an algorithmic complexity DoS in Moodle. The vulnerability affects Moodle releases: 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4. It arises when remote authenticated users use the advanced-search on a highly populated database, causi...
Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities
Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...
Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections
Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...
