Lucene search
+L

7919 matches found

zdt
zdt
added 2010/03/27 12:00 a.m.24 views

Open Web Analytics 1.2.3 multi file include

Exploit for php platform in category web applications =========================================== Open Web Analytics 1.2.3 multi file include =========================================== =========================================================================== Topic : Open Web Analytics 1.2.3 Bu...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2010/03/27 12:00 a.m.20 views

Open Web Analytics 1.2.3 - Multiple File Inclusions

Open Web Analytics 1.2.3 - Multiple File Inclusions =========================================================================== Topic : Open Web Analytics 1.2.3 Bug type : multi file include Download : http://downloads.openwebanalytics.com/owa/owa123.tar Advisory :...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/03/27 12:00 a.m.41 views

Open Web Analytics 1.2.3 - Multiple File Inclusions

=========================================================================== Topic : Open Web Analytics 1.2.3 Bug type : multi file include Download : http://downloads.openwebanalytics.com/owa/owa123.tar Advisory : =========================================================================== Author ...

5.1CVSS5.8AI score0.02862EPSS
SaveExploits3
Prion
Prion
added 2009/12/22 10:30 p.m.22 views

Unrestricted file upload

Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...

7.5CVSS7.5AI score0.75838EPSS
SaveExploits14References16Affected Software2
Cvelist
Cvelist
added 2009/12/22 10:00 p.m.33 views

CVE-2009-4140

Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...

7.2AI score0.75838EPSS
SaveExploits14References16
Debian CVE
Debian CVE
added 2009/12/22 10:00 p.m.31 views

CVE-2009-4140

Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...

7.5CVSS7.7AI score0.75838EPSS
SaveExploits14
CVE
CVE
added 2009/12/22 10:00 p.m.103 views

CVE-2009-4140

CVE-2009-4140 affects Open Flash Chart’s ofc_upload_image.php in Open Flash Chart v2 Beta1 through v2 Lug Wyrm Charmer, used by Piwik 0.2.35–0.4.3 and Woopra Plugin before 1.4.3.2. The issue is an unrestricted file upload when register_globals is enabled, allowing remote authenticated users to up...

7.5CVSS7.1AI score0.75838EPSS
SaveExploits14References16Affected Software2
Packet Storm
Packet Storm
added 2009/12/05 12:00 a.m.37 views

Yoast Google Analytics Cross Site Scripting

Yoast GA Plugin for WP - Cross Site Scripting Vulnerability Version Affected: 3.2.4 newest Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links, links within comments, blogroll links and downloads. It also...

SaveExploits0
exploitpack
exploitpack
added 2009/12/04 12:00 a.m.26 views

WordPress Plugin Yoast Google Analytics 3.2.4 - 404 Error Page Cross-Site Scripting

WordPress Plugin Yoast Google Analytics 3.2.4 - 404 Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/37209/info Yoast Google Analytics for WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An...

SaveExploits0
Patchstack
Patchstack
added 2009/12/04 12:00 a.m.9 views

WordPress Google Analytics Plugin 3.2.4 - 404 Error Page Cross-Site Scripting Vulnerability

This Google Analytics plugin is prone to a cross-site scripting vulnerability. Application fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

2.8AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2009/12/04 12:00 a.m.148 views

[InterN0T] Google Analytics plugin for Wordpress - XSS Vulnerability

Yoast GA Plugin for WP - Cross Site Scripting Vulnerability Version Affected: 3.2.4 newest Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links, links within comments, blogroll links and downloads. It also...

5.9AI score
SaveExploits0
zdt
zdt
added 2009/12/04 12:00 a.m.42 views

WordPress Yoast GA 3.2.4 Plugin XSS

Exploit for unknown platform in category web applications ================================ Yoast GA 3.2.4 Plugin for WP XSS ================================ Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/12/04 12:00 a.m.34 views

WordPress Plugin Yoast Google Analytics 3.2.4 - 404 Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/37209/info Yoast Google Analytics for WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2009/10/19 12:00 a.m.15 views

Piwik 1357 2009-08-02 - Arbitrary File Upload Code Execution

Piwik 1357 2009-08-02 - Arbitrary File Upload Code Execution Piwik Build , fclose$jfh; ? IV. PROOF OF CONCEPT ./libs/open-flash-chart/php-ofc-library/ofc...

0.3AI score
SaveExploits0
zdt
zdt
added 2009/10/19 12:00 a.m.27 views

Piwik <= 1357 2009-08-02 file upload and code execution

Exploit for unknown platform in category web applications ======================================================================== Piwik Build = 1357 2009-08-02 ofcuploadimage.php Remote File Upload ======================================================================== Piwik Build = 1357...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2009/10/19 12:00 a.m.25 views

Piwik &lt;= 1357 2009-08-02 file upload and code execution

No description provided by source. Piwik Build = 1357 2009-08-02 ofcuploadimage.php Remote File Upload Discovery: Braeden Thomas Versions Affected: All Piwik versions utilising open-flash-chart I. DESCRIPTION Piwik is an open source web analytics software. It gives interesting reports on your...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/10/19 12:00 a.m.62 views

Piwik Build 1357 2009-08-02 Remote File Upload

Piwik Build , fclose$jfh; ? IV. PROOF OF CONCEPT ./libs/open-flash-chart/php-ofc-library/ofcuploadimag...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/08/21 12:00 a.m.19 views

Google Analytics on An Internal Web Server Detection

A link to urchin.js from Google Analytics has been found on this internal web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid40668; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

5.3AI score
SaveExploits0References1
myhack58
myhack58
added 2009/04/24 12:00 a.m.18 views

Use GOOGLE Analyzer do server limit dos-vulnerability warning-the black bar safety net

This article is purely YY, and finally did not practice success, but does not exclude other sites have similar possible. Many sites are using google's statistics. When we from a website, A link to a google statistics Site B, google will record the referer URI, and stored into the B COOKIE. If we...

SaveExploits0
Packet Storm
Packet Storm
added 2008/12/09 12:00 a.m.43 views

Google Analytics Stored Cross Site Scripting

====================================================== ================= = Google Analytics - Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.google.com = = Affected Version: = -- http://www.google.com/analytics/ = = Public disclosure on 8th December 2008 =...

7.4AI score
SaveExploits0
Rows per page
Query Builder