CVE-2013-4383

Cross-site scripting XSS vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4383

CVE-2013-4383 describes a cross-site scripting (XSS) vulnerability in the jQuery Countdown module for Drupal (7.x-1.x). The root cause is insufficient sanitization of settings, allowing a user with the access administration pages permission to inject arbitrary script or HTML into a page via unspe...

CVE-2013-4383: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-2781

Name of the Vulnerable Software and Affected Versions Drupal jQuery Countdown module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML...

SA-CONTRIB-2013-076 - jQuery Countdown - Cross Site Scripting (XSS)

This jQuery Countdown Module enables you to display a countdown block based upon date settings. The jQuery Countdown Module does not properly sanitize the settings, allowing a malicious user to embed scripts within a page, resulting in a Cross-site Scripting XSS vulnerability. This vulnerability ...

"Reboot" - Upcoming latest Hacker Movie you should watch !

"Reboot" - Upcoming latest Hacker Movie you should watch Rosa Entertainment and Jan-Ken-Po Pictures just announced that their cyberpunk thriller short film "Reboot" will launch with a Sneak Preview at DEFCON. Written and Directed by Joe Kawasaki, and Produced by Sidney Sherman, the film stars a...

Unrestricted file upload

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...

CVE-2008-6492

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...

CVE-2008-6492

CVE-2008-6492 describes an unrestricted file upload in process.php for the product “Tizag Countdown Creator 3.” An attacker can upload a file with an executable extension via index.php and then access the uploaded file in the pics/ directory to achieve remote code execution. Details note that som...

CVE-2008-6492

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...

CVE-2008-6492: Improper Input Validation

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...

Tizag Countdown Creator .v.3 Insecure Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Tizag Countdown Creator .v.3 Insecure Upload Vulnerability ========================================================== remote file upload script: tizag-countdownVersion3 download...

Tizag Countdown Creator .v.3 Insecure Upload Vulnerability

No description provided by source. remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected]...

Tizag Countdown Creator 3 - Insecure Upload

Tizag Countdown Creator 3 - Insecure Upload remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail:...

Tizag Countdown Creator 3 - Insecure Upload

remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

Sql injection

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0789

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0789

CVE-2008-0789 concerns the LI-Scripts LI-Countdown (countdown.php) SQL injection vulnerability, exploitable via the years parameter. The issue enables remote arbitrary SQL execution with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with no authentication. Impact is reported as Par...

CVE-2008-0789

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...

CVE-2008-0789: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...