Cross site scripting

Cross-site scripting XSS vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated pages...

CVE-2008-4598

Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597...

CVE-2008-4596

Cross-site scripting XSS vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated pages...

Code injection

Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors...

CVE-2008-4597

Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597...

CVE-2008-4597

CVE-2008-4597 affects Shindig-Integrator 5.x, a Drupal module. The vulnerability stems from improper restriction of generated page access, allowing remote attackers to gain privileges via unspecified vectors. The core issue is an access-control bypass within the module’s page generation, leading ...

CVE-2008-4598

Technical details for CVE-2008-4598 are not publicly available in the provided documents. Monitor for updates from NVD/Drupal advisories.

CVE-2008-4598

Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597...

CVE-2008-4596

CVE-2008-4596 is a cross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a Drupal module. The issue affects generated pages and allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The provided documents do not specify affected product ve...

CVE-2008-4596

Cross-site scripting XSS vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated pages...

CVE-2008-4597

Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors...

CVE-2008-4598: Undefined Security Weakness

Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597...

CVE-2008-4597: Undefined Security Weakness

Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors...

CVE-2008-4596: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated pages...

SA-2008-066 - Shindig-Integrator - Multiple vulnerabilities

Shindig-Integrator integrates the open social Shindig container with Drupal. The module contains numerous flaws. Among them are the following issues. Malicious users are able to insert arbitrary HTML and script code into certain module generated pages. Such a Cross site scripting vulnerability ca...

IBiz E-Banking Integrator ActiveX控件WriteOFXDataFile()不安全调用漏洞

BUGTRAQ ID: 28700 IBiz E-Banking Integrator是用于从银行、投资公司等帐号访问财务交易信息的解决方案。 IBiz E-Banking Integrator所提供的IBizEBank.FIProfile.1 ActiveX控件（fiprofile20.ocx）没有正确地处理对WriteOFXDataFile方式的调用，如果用户受骗访问了恶意网页的话，就可能导致以当前登录用户的权限覆盖和破坏系统上的任意文件。 /n software IBiz E-Banking Integrator 2.0 /n software -----------...

CVE-2008-1725

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

Design/Logic Flaw

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

CVE-2008-1725

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...