UBUNTU-CVE-2013-4341

Multiple cross-site scripting XSS vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed...

CVE-2013-4341

Multiple cross-site scripting XSS vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed...

CVE-2013-4341

CVE-2013-4341 concerns multiple XSS vulnerabilities in Moodle prior to certain releases. The flaw allows remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed. Affected versions include Moodle 2.2.11 and 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5....

CVE-2008-0655

creationtimestamp| type| source ---|---|--- 2013-09-09 12:51:06+00:00| seen| MISP/522dbc07-2e20-4aaf-8936-39d4ac1d4fa4 2023-06-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 06:05:26+00:00| seen| https://t.me/arpsyndicate/1130 2023-12-05 09:37:35+00:00| seen|...

Moodle 2.3.9 / 2.4.9 Javascript Insertion

Ciaran McNally Application: Moodle http://download.moodle.org/ Versions: parameter in an rss feed is vulnerable to javascript injection. This blog post is viewable by everyone on moodle and you can link to it directly. Upon clicking the "Link to original blog entry" link, you get javascript...

CVE-2013-1646

Multiple cross-site scripting XSS vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary web script or HTML via 1 invalid JSON data in a mail-sending POST request, 2 an arbitrary parameter to...

CVE-2013-1646

Multiple cross-site scripting XSS vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary web script or HTML via 1 invalid JSON data in a mail-sending POST request, 2 an arbitrary parameter to...

CVE-2013-2465

creationtimestamp| type| source ---|---|--- 2013-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27705 2013-09-05 07:51:03+00:00| seen| MISP/5228311f-08d0-42fd-86a4-3f1cac1d4fa4 2014-01-15 10:35:25+00:00| seen| MISP/52d6636d-b21c-468f-aa25-4b3c950d2109 2014-02-27...

SOL14609 - OpenSSH vulnerability CVE-2008-5161

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. Note: BIG-IP and Enterprise Manager systems running fixed versions can be affected when an older OpenSSH client connects ...

Atlassian Confluence 5.3 Cross Site Scripting

Atlassian Confluence, the Enterprise Wiki Reflected XSS Details ============================================================================== Product: Atlassian Confluence 3.5.6 till 5.3latest version, the Enterprise Wiki Security-Risk: Critical Remote-Exploit: yes Vendor-URL:...

CVE-2013-2245

rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed...

CVE-2013-2245

rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed...

WordPress feed plugin Sql Injection

The WordPress feed plugin suffers from a Sql Injection vulnerability. Iranian Exploit DataBase http://exploit.iedb.ir Exploit Title : WordPress feed plugin Sql Injection Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://exploit.iedb.ir Software Link ...

WordPress WP Feed Plugin - SQL Injection

This WordPress WP Feed plugin's "nid" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

CVE-2013-4721

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4721

CVE-2013-4721 targets TYPO3: SQL injection in the RSS feed for the Records extension (1.0.0 and earlier). Root cause is unsafe handling of input in the RSS feed, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component: typo3 extension records RSS fe...

CVE-2013-4721

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CentOS 5 / 6 : thunderbird (CESA-2013:0982)

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

SOL14468 - Client-side component flaw CVE-2013-0150

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. A fixed client component will automatically be downloaded the next time a client is authenticated to the APM or FirePass...