77 matches found
EUVD-2009-3804
Malware in sbrugna...
EUVD-2007-1023
Malware in sbrugna...
EUVD-2008-0372
Malware in sbrugna...
EUVD-2010-5023
Malware in sbrugna...
EUVD-2006-5191
Malware in sbrugna...
EUVD-2008-1699
Malware in sbrugna...
EUVD-2007-0614
Malware in sbrugna...
EUVD-2007-6126
Malware in sbrugna...
EUVD-2008-2202
Malware in sbrugna...
EUVD-2006-2203
Malware in sbrugna...
EUVD-2007-2420
Malware in sbrugna...
CVE-2010-5059
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...
MediaWiki Cargo Extension Cross-site Scripting vulnerability
An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via drilldown/CargoAppliedFilter.php. An attacker can execute arbitrary scripts in the context of a user's browser by injecting malicious input into the artist, album, or position parameters on the...
PT-2024-2677
Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.35.14 MediaWiki versions 1.36.x through 1.39.x before 1.39.6 MediaWiki versions 1.40.x before 1.40.2 Description An issue in the Cargo extension of MediaWiki allows for XSS attacks via the artist, album, and...
WordPress fGallery Plus Plugin - Reflected Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...
WordPress fGallery Plus Plugin - Reflected Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 file names to apps/userldap/settings.php; 2 url or 3 title parameter to apps/bookmarks/ajax/editBookmark.php; 4 tag or 5 page parameter to...
CVE-2012-0995
Multiple cross-site scripting XSS vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter in an external action to zp-core/admin.php, 2 PATHINTO to an unspecified URL, as demonstrated using /1/, 3 PATHINFO to zp-core/admin.php, or 4...