PT-2012-1845

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.3 Moodle versions 2.1.x through 2.1.0 Description The issue allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity, due to improper restriction of comment...

CVE-2011-4297: Undefined Security Weakness

comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity...

CVE-2011-4299

Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...

CVE-2011-4299

Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...

CVE-2011-4299

Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...

PT-2012-1847

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment. Recommendations For Moodle versio...

BookNux 0.2 <= Multiple Vulnerabilities

BookNux 0.2 = Multiple Vulnerabilities Discovered by: Jean Pascal Pereira [email protected] Vendor information: "Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be integrable, customizable and secure."...

CVE-2011-4299: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...

PT-2012-4591

Name of the Vulnerable Software and Affected Versions Astaro Security Gateway versions prior to 8.305 Description The issue is related to a cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin. This vulnerability allows remote attackers to inject arbitrary web script...

CVE-2012-3238: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment optional" field...

GuestBook Scripts PHP v1.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= GuestBook Script PHP is a script that is very easy to install,...

DEBIAN-CVE-2011-4957

The makeclickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service crash via a comment with a crafted URL that triggers many recursive calls...

CVE-2011-4957

The makeclickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service crash via a comment with a crafted URL that triggers many recursive calls...

PT-2012-2019

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.1.1 Description The issue concerns a function that does not properly check URLs before passing them to a library, allowing remote attackers to cause a denial of service via a comment with a crafted URL that trigge...

CVE-2012-2716

Cross-site request forgery CSRF vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments...

CVE-2012-2716

CVE-2012-2716 is a CSRF vulnerability in the Drupal Comment Moderation module (6.x-1.x) prior to 6.x-1.1. The issue stems from insufficient protection of the publish link URL, allowing remote attackers to perform actions as an administrative user to publish comments. Vulnerable component: Comment...

PT-2012-4206

Name of the Vulnerable Software and Affected Versions Drupal Comment Moderation module versions 6.x-1.x before 6.x-1.1 Description A cross-site request forgery issue exists, allowing remote attackers to hijack the authentication of administrators for requests that publish comments. Recommendation...

Commentics 2.0 - Multiple Vulnerabilities

Commentics 2.0 - Multiple Vulnerabilities Commentics 2.0 Vendor information: "Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be integrable, customizable and secure." Vendor URI: http://www.commentics.org...

CVE-2012-2716: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments...