40 matches found
Cross site scripting
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
CVE-2020-20349
CVE-2020-20349 affects WTCMS 1.0 and describes a stored cross-site scripting (XSS) vulnerability in the link address field of the background links module. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE records) as a stored XSS in that field; no exploit details or affecte...
CVE-2020-20349
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
PT-2021-10484
Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the link address field under the background links module. Recommendations: For WTCMS version 1.0, as a...
CVE-2020-20349: Improper Neutralization of Input During Web Page Generation
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...
Critical RCE Bugs Patched in Drupal 7 and 8
Drupal is urging users to upgrade to the latest release that fixes two critical remote code execution bugs impacting Drupal 7 and Drupal 8. Developers have also identified three additional “moderately critical” vulnerabilities. “A remote attacker could exploit some of these vulnerabilities to tak...
CVE-2015-5497
Cross-site scripting XSS vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5497
Cross-site scripting XSS vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5497
The CVE-2015-5497 issue affects Drupal’s Web Links module (Drupal 6.x-2.x family and Drupal 7.x-1.x family). The vulnerability is an XSS that occurs due to insufficient sanitization in the Web Links module, allowing remote authenticated users with certain permissions to inject arbitrary web scrip...
PT-2015-6949
Name of the Vulnerable Software and Affected Versions Drupal Web Links module versions 6.x-2.x through 6.x-2.5 Drupal Web Links module versions 7.x-1.x through 7.x-1.0 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject...
Drupal Web Links Module Cross-Site Scripting Vulnerability
Drupal is a free and open source content management system developed in PHP. web Links is one of the web link modules. A cross-site scripting vulnerability exists in the Drupal Navigate module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, whi...
Drupal Current Search Links Module Cross-Site Scripting Vulnerability
Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Current Search Links, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive...
PHP-Nuke 7.6 Web_Links Module Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13025/info PHP-Nuke is reportedly affected by multiple cross-site scripting vulnerabilities in the WebLinks Module. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...
Nuked-Klan 1.7 Links Module link_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These vulnerabilities...
Dragonfly CMS 9.0.6 .1 Web_Links Module Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
PHP-Nuke 8.0 Remote Blind SQL Injection
PHP-Nuke new; my $average = 0; print "+ Calculating average load time it may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print "+ the host must be the complete path to...
PT-2005-3706 · Maxdev · Maxdev Md-Pro
Name of the Vulnerable Software and Affected Versions: MAXdev MD-Pro versions 1.0.72 and earlier Description: The issue affects one or more modules in MAXdev MD-Pro, including the Download, Search, Web links, Blocks, Messages, News, Comments, Settings, Stats, or subjects modules. The impact and...
CVE-2004-1957
Multiple cross-site scripting XSS vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the 1 lid and query parameters to the Downloads module, 2 query parameter to the Weblinks module, or 3 hlpfile parameter to openwindow.php...
The_First_Cut_Is_The_Deepest.txt
!/usr/bin/php -q PHPnuke 6.x and 5.x fetch author hash by pokleyzz Web Links module 3rd January 2004 : 9:29 a.m Web Links module bug found by pokleyzz 3rd January 2004 Requirement: PHP 4.x with curl extension; Greet: tynon, sk ,wanvadder, sirflyguy, wxyz , tenukboncit, kerenggakurus , s0cket370 ,...
