WordPress Integrator 1.32 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: WordPress plugin 'WordPress Integrator 1.32' XSS vulnerability Advisory ID: SSCHADV2012-010 Author: Stefan Schurtz Affected Software: Successfully tested on WordPress Integrator 1.32 Vendor URL:...

WordPress Plugin Integrator 1.32 - redirect_to Cross-Site Scripting

WordPress Plugin Integrator 1.32 - redirectto Cross-Site Scripting source: https://www.securityfocus.com/bid/52739/info WordPress Integrator is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

WordPress Integrator 1.32 - Cross Site Scripting

WordPress Integrator "redirectto" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin Integrator 1.32 - 'redirect_to' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52739/info WordPress Integrator is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

SA-CONTRIB-2012-029 - Taxonomy Views Integrator - Cross Site Scripting (XSS)

CVE: CVE-2012-1653 The Taxonomy Views Integrator allows selective overriding of taxonomy terms and/or vocabulary with the view of your choice. Using TVI you can easily create custom views to output all terms in X vocabulary. The module doesn't sufficiently filter user supplied text on views pages...

CVE-2011-2543

CVE-2011-2543 affects Cisco TelePresence System Integrator C Series 4.x up to TC4.2.0. A buffer overflow in the cuil component triggered by a long location parameter to getxml (via the locally listening tshell) allows remote authenticated users to cause a denial of service (endpoint reboot or pro...

SA-CONTRIB-2011-038 - Taxonomy Views Integrator - Cross Site Scripting

This module enables you to override whole vocabularies or individual terms with the View of your choice. The module did not filter user entered term descriptions for Cross Site Scripting XSS injections. This vulnerability is mitigated by the fact that an attacker must have a role with the...

CVE-2010-1977

Directory traversal vulnerability in the J!WHMCS Integrator comjwhmcs component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1977

Summary (CVE-2010-1977): A directory traversal/local-file-inclusion vulnerability in the Joomla! extension J!WHMCS Integrator (com_jwhmcs) 1.5.0 allows remote attackers to read arbitrary files by using a ".." path in the controller parameter of index.php. Affected software: Joomla! with com_jwhmc...

Joomla Component J!WHMCS Integrator com_jwhmcs Local File Inclusion

Exploit for php platform in category web applications ================================================================================= Joomla Component J!WHMCS Integrator comjwhmcs Local File Inclusion Vulnerability ================================================================================...

Joomla J!WHMCS Integrator Local File Inclusion

============================================================================================================ o Joomla Component J!WHMCS Integrator Local File Inclusion Vulnerability Software : comjwhmcs version 1.5.0 Vendor : https://client.gohigheris.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBo...

Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion

Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion ============================================================================================================ o Joomla Component J!WHMCS Integrator Local File Inclusion Vulnerability Software : comjwhmcs version 1.5.0 Vendor :...

CVE-2010-1041

The CVE-2010-1041 entry concerns IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13. The vulnerability is in the single sign-on Web Services implementation; the root cause is not specified in the available documents. Impact is d...

CVE-2009-4514

Cross-site scripting XSS vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x before 6.x-2.1, a module for Drupal, allows remote authenticated users, with "create application" privileges, to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x before 6.x-2.1, a module for Drupal, allows remote authenticated users, with "create application" privileges, to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4514

CVE-2009-4514 is an XSS vulnerability in the OpenSocial Shindig-Integrator module for Drupal (versions 5.x and 6.x) before 6.x-2.1. It allows remote authenticated users with "create application" privileges to inject arbitrary script/HTML via unspecified vectors. Exact exploitation details and rem...

CVE-2009-4514

Cross-site scripting XSS vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x before 6.x-2.1, a module for Drupal, allows remote authenticated users, with "create application" privileges, to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2009-086 - OpenSocial Shindig-Integrator - Cross Site Scripting

The OpenSocial Shindig-Integrator module enables sites to host OpenSocial widgets. The module fails to sanitize user input, making it vulnerable to cross site scripting XSS attacks. This vulnerability is somewhat limited by the fact that an attacker would need an account with the permissions to...

CVE-2009-1005

Unspecified vulnerability in the Oracle Data Service Integrator AquaLogic Data Services Platform component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Data Service Integrator AquaLogic Data Services Platform component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors...