CVE-2008-0701

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...

CVE-2008-0701

CVE-2008-0701 affects Magnolia CE 3.5.x prior to 3.5.4. The ActivationHandler during import does not check permissions, allowing remote attackers to potentially activate a new item and add arbitrary content. This describes a permission-bypass in the import path with unknown exact impact. Remediat...

magnolia.txt

Magnolia CMS Script Insertion Vulnerability Risk: Medium Class: Remote Script: Magnolia CMS Version: not define ------------------------------------------------------------------- Example: http://target/path/search.html?query=CODE&x=0&y=0 http://target/path/search.html?query=alert"lol";&x=0&y=0...

CVE-2005-4361

Cross-site scripting XSS vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4361

Magnolia Content Management Suite 2.1 is affected by a cross-site scripting (XSS) vulnerability in search.html that allows an attacker to inject arbitrary script or HTML via the query parameter. The issue is described across multiple sources (NVD and CVE records) with the vulnerability specifical...

CVE-2005-4361

Cross-site scripting XSS vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

Magnolia Search Module 2.1 - Cross-Site Scripting

Magnolia Search Module 2.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Magnolia Search Module 2.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Magnolia XSS vuln.

Magnolia XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magnolia-xss-vuln.html vendor:http://www.magnolia.info affected version:2.1 and prior Product Description: Magnolia is the free, open source, J2EE deployable content management...