Cross site scripting

Cross-site scripting XSS vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, t...

CVE-2009-4558

The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the 1...

CVE-2009-4557

The CVE-2009-4557 entry concerns a Cross-site scripting (XSS) vulnerability in the Drupal Image Assist module. Affected releases are: 5.x-1.x before 5.x-1.8; 5.x-2.x before 2.0-alpha4; 6.x-1.x before 6.x-1.1; 6.x-2.x before 2.0-alpha4; and 6.x-3.x-dev before 2009-07-15. The issue allows remote au...

CVE-2009-4558

Affected software: Drupal Image Assist module (modules) versions 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15. Vulnerability: The module does not properly enforce privilege requirements for unspecified page...

CVE-2009-4557

Cross-site scripting XSS vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, t...

CVE-2009-4558

The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the 1...

CVE-2009-4064

Cross-site scripting XSS vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles...

Cross site scripting

Cross-site scripting XSS vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles...

CVE-2009-4064

CVE-2009-4064 describes a cross-site scripting (XSS) vulnerability in the Drupal Gallery Assist module (6.x) prior to version 6.x-1.7. The issue allows remote attackers to inject arbitrary web script or HTML via node titles, enabling potential credential theft or session hijacking in affected ins...

CVE-2009-4064

Cross-site scripting XSS vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles...

[SECURITY] Fedora 10 Update: kdeaccessibility-4.3.1-1.fc10

Included with this package are: kmag: a screen magnifier kmousetool: a program for people whom it hurts to click the mouse kmouth: program that allows people who have lost their voice ktts: text to speech support...

SA-CONTRIB-2009-043 - Image Assist - Multiple vulnerabilities

The Image Assist module for Drupal 5.x and 6.x allows users to upload and insert inline images into posts. Two vulnerabilities and weaknesses were discovered in the contributed Image Assist module. Cross site scripting The node title is treated as if it was safe text, and is not escaped before...

CVE-2006-6524

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname UserName parameter...

CVE-2006-6525

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6525

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6525

CVE-2006-6525 affects EzHRS HR Assist 1.05 and earlier. The vulnerability is an SQL injection in vdateUsr.asp that allows remote attackers to execute arbitrary SQL commands via the password parameter. The connected documents confirm the existence of a remote, unauthenticated impact with potential...

CVE-2006-6524

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname UserName parameter...

CVE-2006-6524

CVE-2006-6524 is a SQL injection vulnerability in EzHRS HR Assist prior to or including 1.05, occurring in vdateUsr.asp through the Uname (UserName) parameter. The issue arises from improper handling of user input, allowing remote attackers to execute arbitrary SQL commands. Public references inc...

HR Assist <= 1.05 (vdateUsr.asp) Remote Login ByPass Vulnerability

Exploit for unknown platform in category web applications ================================================================== HR Assist = 1.05 vdateUsr.asp Remote Login ByPass Vulnerability ================================================================== Title : HR Assist = 1.05 vdateUsr.asp...

HR Assist 1.05 - vdateUsr.asp Remote Authentication Bypass

HR Assist 1.05 - vdateUsr.asp Remote Authentication Bypass Title : HR Assist = 1.05 vdateUsr.asp Remote Login ByPass SQL Injection Author : ajann Page : http://www.ezhrs.com Contact : : $$$ : $45 Example: http://target/path/ UserName: ' union select 0,0,0,0,0,0,0,0,0,0,0,0,0 from admin...