Drupal Keyword Research Module Cross-Site Request Forgery Vulnerability

Drupal is an open source content management system.Keyword Research is a module that provides keywords for searches. A cross-site request forgery vulnerability exists in the Drupal Keyword Research module that allows remote attackers to construct malicious URIs, trick users into parsing them, and...

[SECURITY] Fedora 22 Update: yourls-1.7-3.20150410gitabc7d6c.fc22

YOURLS is a small set of PHP scripts that will allow you to run your own URL shortening service a la TinyURL. You can make it private or public, you can pick custom keyword URLs, it comes with its own API...

[SECURITY] Fedora 21 Update: yourls-1.7-3.20150410gitabc7d6c.fc21

YOURLS is a small set of PHP scripts that will allow you to run your own URL shortening service a la TinyURL. You can make it private or public, you can pick custom keyword URLs, it comes with its own API...

Keyword Research - Moderately Critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2015-098

Keyword Research module enables you to tag and prioritize keywords on a site and node level basis. The module doesn't sufficiently protect some URLs against CSRF. A malicious user can cause another user with "kwresearch admin site keywords" permission to create, delete and set priorities to...

CVE-2014-100030

CVE-2014-100030 describes an XSS vulnerability in the Ganesha Digital Library (GDL) 4.2. The flaw is in the file module/search/function.php and allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action. The available sources indicate the affected s...

CVE-2014-100030

Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...

PT-2015-3638

Name of the Vulnerable Software and Affected Versions Ganesha Digital Library GDL version 4.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action. This occurs in the...

CVE-2014-100030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...

CVE-2014-7200

Cross-site scripting XSS vulnerability in pi1/class.txdmmjobcontrolpi1.php in the JobControl dmmjobcontrol extension 2.14.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via the txdmmjobcontrolpi1searchkeyword parameter to jobs/...

PT-2014-7832

Name of the Vulnerable Software and Affected Versions TYPO3 JobControl dmmjobcontrol extension versions 2.14.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the tx dmmjobcontrol pi1searchkeyword parameter to the "jobs/"...

CVE-2014-7200: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pi1/class.txdmmjobcontrolpi1.php in the JobControl dmmjobcontrol extension 2.14.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via the txdmmjobcontrolpi1searchkeyword parameter to jobs/...

EGYWEB (Mantrac) <= Remote File Disclosure Exploit

database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...

CVE-2014-3330: Undefined Security Weakness

Cisco NX-OS 6.12I21 on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489...

IFRAME sandbox same-origin access through redirect — Mozilla

Mozilla developer Boris Zbarsky discovered an issue where network-level redirects cause an sandbox to forget its unique origin and behave as if the allow-same-origin keyword were applied. This allows the sandboxed content to access other content from the same origin without explicit approval...

WordPress Keyword Strategy Internal Links Plugin Cross Site Scripting Vulnerability

WordPress Keyword Strategy Internal Links Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2014-4537

Cross-site scripting XSS vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 sort, 2 search, or 3 dir parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 sort, 2 search, or 3 dir parameter...

CVE-2014-4537

Cross-site scripting XSS vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 sort, 2 search, or 3 dir parameter...

CVE-2014-4537

CVE-2014-4537 affects WordPress Keyword Strategy Internal Links Plugin (

CVE-2014-4537: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 sort, 2 search, or 3 dir parameter...