CVE-2012-5913

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

CVE-2012-1653

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...

CVE-2012-1653

The CVE-2012-1653 issue affects the Taxonomy Views Integrator (TVI) module for Drupal 6.x-1.x before 6.x-1.3. The vulnerability arises from insufficient filtering of user-supplied text on views pages, enabling XSS by authenticated users. Impact is limited to partial integrity of data and arbitrar...

CVE-2012-1653

Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...

WordPress Integrator 1.32 - Cross Site Scripting

WordPress Integrator "redirectto" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin Integrator 1.32 - redirect_to Cross-Site Scripting

WordPress Plugin Integrator 1.32 - redirectto Cross-Site Scripting source: https://www.securityfocus.com/bid/52739/info WordPress Integrator is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

WordPress Integrator 1.32 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: WordPress plugin 'WordPress Integrator 1.32' XSS vulnerability Advisory ID: SSCHADV2012-010 Author: Stefan Schurtz Affected Software: Successfully tested on WordPress Integrator 1.32 Vendor URL:...

WordPress Plugin Integrator 1.32 - 'redirect_to' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52739/info WordPress Integrator is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

SA-CONTRIB-2012-029 - Taxonomy Views Integrator - Cross Site Scripting (XSS)

CVE: CVE-2012-1653 The Taxonomy Views Integrator allows selective overriding of taxonomy terms and/or vocabulary with the view of your choice. Using TVI you can easily create custom views to output all terms in X vocabulary. The module doesn't sufficiently filter user supplied text on views pages...

CVE-2011-2543

CVE-2011-2543 affects Cisco TelePresence System Integrator C Series 4.x up to TC4.2.0. A buffer overflow in the cuil component triggered by a long location parameter to getxml (via the locally listening tshell) allows remote authenticated users to cause a denial of service (endpoint reboot or pro...

SA-CONTRIB-2011-038 - Taxonomy Views Integrator - Cross Site Scripting

This module enables you to override whole vocabularies or individual terms with the View of your choice. The module did not filter user entered term descriptions for Cross Site Scripting XSS injections. This vulnerability is mitigated by the fact that an attacker must have a role with the...

CVE-2010-1977

Directory traversal vulnerability in the J!WHMCS Integrator comjwhmcs component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1977

Summary (CVE-2010-1977): A directory traversal/local-file-inclusion vulnerability in the Joomla! extension J!WHMCS Integrator (com_jwhmcs) 1.5.0 allows remote attackers to read arbitrary files by using a ".." path in the controller parameter of index.php. Affected software: Joomla! with com_jwhmc...

Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion

Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion ============================================================================================================ o Joomla Component J!WHMCS Integrator Local File Inclusion Vulnerability Software : comjwhmcs version 1.5.0 Vendor :...

Joomla Component J!WHMCS Integrator com_jwhmcs Local File Inclusion

Exploit for php platform in category web applications ================================================================================= Joomla Component J!WHMCS Integrator comjwhmcs Local File Inclusion Vulnerability ================================================================================...

Joomla J!WHMCS Integrator Local File Inclusion

============================================================================================================ o Joomla Component J!WHMCS Integrator Local File Inclusion Vulnerability Software : comjwhmcs version 1.5.0 Vendor : https://client.gohigheris.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBo...

CVE-2010-1041

The CVE-2010-1041 entry concerns IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13. The vulnerability is in the single sign-on Web Services implementation; the root cause is not specified in the available documents. Impact is d...

Cross site scripting

Cross-site scripting XSS vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x before 6.x-2.1, a module for Drupal, allows remote authenticated users, with "create application" privileges, to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4514

Cross-site scripting XSS vulnerability in the OpenSocial Shindig-Integrator module 5.x and 6.x before 6.x-2.1, a module for Drupal, allows remote authenticated users, with "create application" privileges, to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4514

CVE-2009-4514 is an XSS vulnerability in the OpenSocial Shindig-Integrator module for Drupal (versions 5.x and 6.x) before 6.x-2.1. It allows remote authenticated users with "create application" privileges to inject arbitrary script/HTML via unspecified vectors. Exact exploitation details and rem...