phlyLabs phlyMail Lite 4.03.04 - 'go' Open Redirect

phlyLabs phlyMail Lite 4.03.04 go param Open Redirect Vulnerability Vendor: phlyLabs Product web page: http://www.phlymail.com Affected version: Lite 4.03.04 Summary: phlyMail offers you an interface in the browser to have access to your emails, contacts, appointments, tasks, files and bookmakrs...

phlyLabs phlyMail Lite 4.03.04 - Full Path Disclosure Persistent Cross-Site Scripting

phlyLabs phlyMail Lite 4.03.04 - Full Path Disclosure Persistent Cross-Site Scripting phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities form method="POST" action="http://localhost/config.php?action=user...

phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities

Summary phlyMail offers you an interface in the browser to have access to your emails, contacts, appointments, tasks, files and bookmakrs from anyhwere, where you have internet access. This can be your home, workplace, train station, abroad, offroad, in the woods or your own backyard. Description...

PHP Lite Admin 1.9.3 Code Injection

Exploit Title: phpliteadmin phpliteadmin.php1785: 'When you create a new database, the name you entered will be appended with the appropriate file extension .db, .db3, .sqlite, etc. if you do not include it yourself. The database will be created in the directory you specified as the $directory...

Sielco Sistemi Winlog SCADA Remote File Access

A Directory Traversal vulnerability has been reported in Sielco Sistemi Winlog Lite...

MPC (Media Player Classic) WebServer Multiple Vulnerabilities

========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities ==========================================================================================...

CVE-2011-5191

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192...

CVE-2011-5192

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

Cross site scripting

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192...

Cross site scripting

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

CVE-2011-5191

CVE-2011-5191 describes an XSS vulnerability in the Pretty Link Lite WordPress plugin, specifically in the pretty-bar.php code path. The flaw allows remote attackers to inject arbitrary web script or HTML via the slug parameter in versions prior to 1.5.4. This is a distinct vulnerability from CVE...

CVE-2011-5192

CVE-2011-5192 describes a Cross-site scripting (XSS) vulnerability in the Pretty Link Lite WordPress plugin. Affected component: pretty-bar.php in Pretty Link Lite. Vulnerable until version 1.5.5 (i.e., "before 1.5.6"). Root cause: XSS via the slug parameter, enabling an attacker to inject arbitr...

CVE-2011-5192

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

WordPress Pretty Link Lite Plugin <= 1.5.5 - XSS

Because of this vulnerability in pretty-bar.php, the attackers can inject arbitrary web script or HTML via the "slug" parameter. Solution Update the plugin...

WordPress Pretty Link Lite Plugin <= 1.5.3 - XSS

Because of this vulnerability in pretty-bar.php, the attackers can inject arbitrary web script or HTML via the "slug" parameter. Solution Update the plugin...

CVE-2010-5244

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

CVE-2010-5239

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details a...

Design/Logic Flaw

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

Design/Logic Flaw

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details a...

CVE-2010-5239

The CVE-2010-5239 issue affects DAEMON Tools Lite (v4.35.6.0091) and DAEMON Tools Pro Standard (v4.36.0309.0160). It is an untrusted search path/LPE vulnerability where a Trojan horse mfc80loc.dll in the current working directory can be loaded to escalate privileges (illustrated by a directory co...