163 matches found
Magnolia CMS - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/61423/info Magnolia CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...
Magnolia CMS - Multiple Cross-Site Scripting Vulnerabilities
Magnolia CMS - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/61423/info Magnolia CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
[Full-disclosure] Magnolia CMS multiple access control vulnerabilities
Subject: ====== Multiple access control vulnerabilities in Magnolia CMS, Community and Enterprise editions CVE ID: ====== CVE-2013-4621 Summary: ======== A non-admin user such as default users eric / peter can access and execute multiple administrative functionalities of the CMS by accessing...
Cross-Site Scripting (XSS) in Magnolia CMS
High-Tech Bridge Security Research Lab discovered XSS vulnerability in Magnolia CMS, which can be exploited to perform Cross-Site Scripting attacks against users of vulnerable application. 1 Cross-Site Scripting XSS in Magnolia CMS: CVE-2013-4759 The vulnerability exists due to insufficient...
Magnolia CMS Access Bypass Vulnerability
This host is running Magnolia CMS and is prone to access bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmagnoliaaccessbypassvuln.nasl 6115 2017-05-12 09:03:25Z teissa $ Magnolia CMS Access Bypass Vulnerability Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone Networks GmbH,...
Magnolia CMS 4.5.8 Access Bypass
Subject: ====== Multiple access control vulnerabilities in Magnolia CMS, Community and Enterprise editions CVE ID: ======= CVE-2013-4621 Summary: ======== A non-admin user such as default users eric / peter can access and execute multiple administrative functionalities of the CMS by accessing...
Carrier IQ Hires a Chief Privacy Officer
Carrier IQ, a startup heavily bruised last fall by harsh criticism of its handset diagnostic software, today announced it’s hired a high-profile lawyer as its Chief Privacy Officer. According to a news release, Magnolia Mansourkia Mobley, a CIPP and former Verizon executive, will be tasked with...
Magnolia Development Group CSRF / SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
CVE-2008-1953
Cross-site scripting XSS vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
Cross site scripting
Cross-site scripting XSS vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2008-1953
CVE-2008-1953 describes a cross-site scripting (XSS) vulnerability in Magnolia Enterprise Edition’s Sitedesigner, specifically in the pre-1.1.5 search template. The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter. The connected documents confirm the af...
CVE-2008-1953
Cross-site scripting XSS vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2008-0701
ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...
Code injection
ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...
CVE-2008-0701
CVE-2008-0701 affects Magnolia CE 3.5.x prior to 3.5.4. The ActivationHandler during import does not check permissions, allowing remote attackers to potentially activate a new item and add arbitrary content. This describes a permission-bypass in the import path with unknown exact impact. Remediat...
CVE-2008-0701
ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...
magnolia.txt
Magnolia CMS Script Insertion Vulnerability Risk: Medium Class: Remote Script: Magnolia CMS Version: not define ------------------------------------------------------------------- Example: http://target/path/search.html?query=CODE&x=0&y=0 http://target/path/search.html?query=alert"lol";&x=0&y=0...
CVE-2005-4361
Cross-site scripting XSS vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2005-4361
Cross-site scripting XSS vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2005-4361
Magnolia Content Management Suite 2.1 is affected by a cross-site scripting (XSS) vulnerability in search.html that allows an attacker to inject arbitrary script or HTML via the query parameter. The issue is described across multiple sources (NVD and CVE records) with the vulnerability specifical...