132 matches found
Elgg index.php view Parameter XSS
The version of the Elgg installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'view' parameter of the 'index.php' script. An attacker may be able to leverage this to inject arbitrary HTML and script code into a...
CVE-2011-3733
Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/test/visualtest.php and certain other files...
Information disclosure
Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/test/visualtest.php and certain other files...
CVE-2011-3733
Elgg 1.7.6 is affected by CVE-2011-3733. An information-disclosure flaw allows remote attackers to obtain sensitive data by making a direct request to certain PHP files, which reveals the installation path in an error message (as demonstrated by vendors/simpletest/test/visual_test.php and related...
CVE-2011-3733
Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/test/visualtest.php and certain other files...
Elgg 1.7.10 <= | Multiple Vulnerabilities
OVERVIEW The Elgg 1.7.10 and lower versions are vulnerable to Cross Site Scripting and SQL Injection. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities and associations to create their own fully-featured...
Elgg 1.7.10 - Multiple Vulnerabilities
Elgg 1.7.10 - Multiple Vulnerabilities Exploit Title: Elgg 1.7.10 Software Link: http://elgg.org/getelgg.php?forward=elgg-1.7.10.zip Version: 1.7.10 = 1. XSS...
Elgg 1.7.10 Cross Site Scripting / SQL Injection
OVERVIEW The Elgg 1.7.10 and lower versions are vulnerable to Cross Site Scripting and SQL Injection. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities and associations to create their own fully-featured...
Elgg 1.7.10 - Multiple Vulnerabilities
Exploit Title: Elgg 1.7.10 Software Link: http://elgg.org/getelgg.php?forward=elgg-1.7.10.zip Version: 1.7.10 = 1. XSS...
Elgg 1.7.10 <= Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Elgg 1.7.10 Software Link: http://elgg.org/getelgg.php?forward=elgg-1.7.10.zip Version: 1.7.10 = 1. XSS...
{Lostmonґs Group} Elgg 1.8 beta2 and prior to 1.7.11 'container_guid' and 'owner_guid' SQL Injection
Elgg 1.8 beta2 and prior to 1.7.11 'containerguid' and 'ownerguid' SQL Injection Vendor URL: http://www.elgg.org/ Advisore: http://lostmon.blogspot.com/2011/08/elgg-18-beta2-and-prior-to-1711.html Vendor notify: YES exploit available: YES Description By vendor Elgg is an award-winning social...
Elgg 1.8 beta2 SQL Injection
Elgg 1.8 beta2 and prior to 1.7.11 'containerguid' and 'ownerguid' SQL Injection Vendor URL: http://www.elgg.org/ Advisore: http://lostmon.blogspot.com/2011/08/elgg-18-beta2-and-prior-to-1711.html Vendor notify: YES exploit available: YES Description By vendor Elgg is an award-winning social...
Elgg 1.8 beta2 SQL Injection
Exploit for php platform in category web applications Elgg 1.8 beta2 and prior to 1.7.11 'containerguid' and 'ownerguid' SQL Injection Vendor URL: http://www.elgg.org/ Advisore: http://lostmon.blogspot.com/2011/08/elgg-18-beta2-and-prior-to-1711.html Vendor notify: YES exploit available: YES...
Curverider Elgg 1.7.9 - Multiple Cross-Site Scripting Vulnerabilities
Curverider Elgg 1.7.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48946/info Curverider Elgg is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues ...
Elgg 1.7.9 <= | Multiple Cross Site Scripting Vulnerabilities
Elgg 1.7.9 = | Multiple Cross Site Scripting Vulnerabilities 1. OVERVIEW The Elgg 1.7.9 and lower versions are vulnerable to multiple Cross Site Scripting. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities...
Elgg 1.7.9 Cross Site Scripting
Elgg 1.7.9 = | Multiple Cross Site Scripting Vulnerabilities 1. OVERVIEW The Elgg 1.7.9 and lower versions are vulnerable to multiple Cross Site Scripting. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities...
CVE-2009-3149
Directory traversal vulnerability in css/js.php in Elgg 1.5, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the js parameter. NOTE: some of these details are obtained from third party information...
Directory traversal
Directory traversal vulnerability in css/js.php in Elgg 1.5, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the js parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-3149
Directory traversal vulnerability in css/js.php in Elgg 1.5, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the js parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-3149
CVE-2009-3149 describes a directory traversal in Elgg 1.5, allowing remote read of arbitrary files via a ".." in the js parameter of _css/js.php when magic_quotes_gpc is disabled. Affected software is Elgg 1.5; root cause is insufficient input validation in the js parameter leading to path traver...