5328 matches found
Scripts Feed Dating Software SQL Injection
============================================================================== Scripts Feed Dating Software Cookie Manip/SQLi Multiple Remote Vulnerabilities ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27...
Scripts Feed Business Directory SQL Injection
============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27 2010 + Founder: Cr...
Scripts Feed Business Directory SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== Scripts Feed Business Directory SQL Injection Vulnerability ===========================================================...
Scripts Feed Business Directory - SQL Injection
Scripts Feed Business Directory - SQL Injection ============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com ...
Scripts Feed Dating Software (Cookie Manip/SQLi) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ========================================================================= Scripts Feed Dating Software Cookie Manip/SQLi Multiple Vulnerabilities =========================================================================...
Scripts Feed Business Directory - SQL Injection
============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27 2010 + Founder: Cr...
Debian Security Advisory DSA 1951-1 (firefox-sage)
The remote host is missing an update to firefox-sage announced via advisory DSA 1951-1. OpenVAS Vulnerability Test $Id: deb19511.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1951-1 firefox-sage Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
DSA-1951-1 firefox-sage - insufficient input sanitizing
Bulletin has no description...
[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
Firefox infoRSS扩展RSS源跨域脚本执行漏洞
BUGTRAQ ID: 37091 CVECAN ID: CVE-2009-4101 infoRSS是一款可以在状态栏显示RSS源的Firefox扩展。 infoRSS扩展没有正确地过滤RSS源中的description标签输入便用于渲染内容,用户受骗订阅了恶意的RSS源就会导致以chrome:权限执行任意脚本代码。 Mozilla infoRSS 1.1.4.2 厂商补丁: Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Cross site scripting
Cross-site scripting XSS vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4119
Cross-site scripting XSS vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4119
The CVE-2009-4119 issue affects Drupal’s Feed Element Mapper module: versions 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 are vulnerable to cross-site scripting, allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. Root cause deta...
CVE-2009-4119
Cross-site scripting XSS vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed...
CVE-2009-4102
The CVE-2009-4102 entry concerns the Sage Firefox extension (1.4.3 and earlier) which processes feed descriptions with chrome privileges, enabling remote command execution and cross-domain scripting via crafted RSS/Atom feeds. Affected versions include Sage prior to 1.4.6; Debian’s advisory and J...
CVE-2009-4101
infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed...
SA-CONTRIB-2009-104 - Feed Element Mapper - Cross Site Scripting
Feed Element Mapper is an add-on module for FeedAPI that maps elements on a feed item such as tags, or the author name, to taxonomy or CCK fields. These mappings are configurable by a point and click interface. When configuring the mapping, some values coming from external feeds are not sanitized...
FreeBSD : opera -- multiple vulnerabilities (2fda6bd2-c53c-11de-b157-001999392805)
Opera Team Reports : - Fixed an issue where certain domain names could allow execution of arbitrary code, as reported by Chris Weber of Casaba Security - Fixed an issue where scripts can run on the feed subscription page, as reported by Inferno %NASLMINLEVEL 70300 C Tenable Network Security, Inc...