2317 matches found
PT-2014-3494 · Red Hat · Red Hat Cloudforms
Name of the Vulnerable Software and Affected Versions: Red Hat CloudForms 3.0 Management Engine CFME version 5.x Description: The issue concerns the AgentController in Red Hat CloudForms 3.0 Management Engine CFME, where the get and log methods allow remote attackers to insert arbitrary text into...
CVE-2014-0136: Improper Input Validation
The 1 get and 2 log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine CFME 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors...
CMS Made Simple 1.11.9 - Multiple Vulnerabilities
CMS Made Simple 1.11.9 - Multiple Vulnerabilities Vulnerabilities in CMS Made Simple, version 1.11.9 Discovered by Pedro Ribeiro [email protected] of Agile Information Security Reported to [email protected] and [email protected] Disclosure: 28/02/2014 / Last updated: 12/10/2014 CMS...
CMS Made Simple 1.11.9 - Multiple Vulnerabilities
Vulnerabilities in CMS Made Simple, version 1.11.9 Discovered by Pedro Ribeiro [email protected] of Agile Information Security Reported to [email protected] and [email protected] Disclosure: 28/02/2014 / Last updated: 12/10/2014 CMS Made Simple, an open source content management...
PayPal France Mail Encoding Script Insertion
Document Title: =============== PayPal Inc Bug Bounty Issue 70 France - Persistent Escape Shopping Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=869...
BulletProof Security <= .50.8 - Script Insertion
The BulletProof Security WordPress plugin was affected by a Script Insertion security vulnerability...
High risk warning: the Bash environment variables remote code insertion vulnerability-vulnerability warning-the black bar safety net
A few months ago around the high-profile OpenSSL heartbleed information disclosure vulnerability only in the past did not take long, the Internet also broke a than bleeding heart more fierce vulnerability: Bash environment variables remote code insertion vulnerability. The server of the cgi...
TinyShop同一处盲注和存储型xss
简要描述： 参数未进行过滤，导致同一位置出现sql注入和可打后台存储xss。 详细说明： 先看看tinyshop如何处理传递的参数： /framework/lib/util/requestclass.php中 public static function get $num = funcnumargs; $args = funcgetargs; if$num==1 ifisset$GET$args0 ifisarray$GET$args0return $GET$args0; else return trim$GET$args0; return null; else if$num=2...
Cmseasy建站系统csrf获取管理权限后台getshell
简要描述： Cmseasy建站系统csrf获取管理权限后台getshell 详细说明： 在修改管理密码处存在csrf漏洞 http://localhost/cmseasy/uploads/index.php?case=table&act=edit&table=user&id=1&admindir=admin&site=default post:...
Exim < 4.83 Math Comparison Functions Data Insertion
According to its banner, the version of Exim running on the remote host is prior to 4.83. It is, therefore, potentially affected by a data insertion vulnerability. A flaw exists in the expansion of arguments to math comparison functions which can cause values to be expanded twice. This could perm...
Lazyest Gallery <= 1.1.20 - EXIF Script Insertion
The Lazyest Gallery WordPress plugin was affected by an EXIF Script Insertion security vulnerability...
Citizen Space 1.0 - Script Insertion CSRF
The citizen-space WordPress plugin was affected by a Script Insertion CSRF security vulnerability...
Dropdown Menu Widget 1.9.1 - Script Insertion CSRF
The Dropdown Menu Widget WordPress plugin was affected by a Script Insertion CSRF security vulnerability...
WP-DownloadManager 1.60 - Script Insertion CSRF
The wp-download-manager WordPress plugin was affected by a Script Insertion CSRF security vulnerability...
WP Lead Management 3.0.0 - Script Insertion Vulnerabilities
The wp-effective-lead-management WordPress plugin was affected by a Script Insertion Vulnerabilities security vulnerability...
Mac Photo Gallery - Multiple Script Insertion Vulnerabilities
The mac-dock-gallery WordPress plugin was affected by a Multiple Script Insertion Vulnerabilities security vulnerability...
Slideshow - Multiple Script Insertion Vulnerabilities
The Slideshow WordPress plugin was affected by a Multiple Script Insertion Vulnerabilities security vulnerability...
Mail Subscribe List - Script Insertion
The Mail Subscribe List WordPress plugin was affected by a Script Insertion security vulnerability...
MTP Guestbook 1.0 - Multiple XSS Vulnerabilities
No description provided by source. ?!-- MTP Guestbook 1.0 Multiple Remote Script Insertion Vulnerabilities Vendor: MTP Scripts Product web page: http://www.morephp.net Affected version: 1.0 Summary: MTP Guestbook allows you to put a guestbook on your website. Your visitors can sign it and leave a...