CVE-2009-3337

CVE-2009-3337 affects the Serendipity S9Y Freetag plugin prior to version 3.09. The issue is an SQL injection in the serendipity_event_freetag component, exploitable by supplying a crafted value to a parameter associated with Meta keywords in a blog entry. Impact is the ability for remote attacke...

CVE-2009-3337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

Cross site scripting

Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...

CVE-2008-0751

Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...

CVE-2008-0751

Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...

CVE-2008-0751

CVE-2008-0751 : Cross-site scripting in the Freetag before 2.96 plugin for S9Y Serendipity. When using Internet Explorer 6/7, an attacker can inject arbitrary script/HTML via PATH_INFO to plugin/tag/. Root cause is an XSS vulnerability in the plugin handling PATH_INFO. Affected: Freetag plugin (v...

CVE-2008-0751: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...

[Full-disclosure] Serendipity Freetag-plugin XSS vulnerability

Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...

S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting

S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an...

S9Y Serendipity Freetag-plugin 2.95 - 'style' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to laun...

serendipityfreetag-xss.txt

Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...