MagpieRSS 0.72 Cross Site Scripting And HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...

Elastix 2.4.0 Cross Site Scripting

Exploit Title: Elastix 2.4.0 Multiple XSS Date: 17 Nov 2013 Author: Bassem - Unshield Team Contact: Securityatunshielddotnet Software Link: http://www.elastix.org/ Version: 2.4.0 , works for same libs exist also on Elastix 3.0.0 Alpha Tested on: 2.4.0...

MagpieRSS 0.72 - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

MagpieRSS 0.72 - Cross-Site Scripting HTML Injection

MagpieRSS 0.72 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code...

MagpieRSS Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -= MagpieRSS Multiple XSS Vulnerabilities =- May 6, 2009 Author: Justin C. Klein Keane Software: MagpieRSS http://magpierss.sourceforge.net/ Version Tested: magpierss-0.72 Vendor notified Full details can also be found at...

MagpieRSS 0.72 - CDATA HTML Injection

MagpieRSS 0.72 - CDATA HTML Injection source: https://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...

MagpieRSS XSS 0day

Hello, I have found a Cross Site Scripting vulnerability in MagpieRSS, an RSS parser written in PHP, basically, this piece of software enables users to add their own RSS feeds to be parsed, so they can keep up to date with their favourite feeds, as well as the pre-defined ones. I crafted my own R...

MagpieRSS 0.72 - CDATA HTML Injection

source: https://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of th...

CVE-2007-2337

CVE-2007-2337 affects Exponent CMS 0.96.6 Alpha and earlier. The issue comprises multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via: (1) the url parameter to magpie_debug.php and magpie_simple.php (external/magpierss/scripts/...

ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ZebraFeeds 1.0 zfpath Remote File Include Vulnerabilities ============================================================ Discovered By:- ThE email protected aggregator.php:-...

ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion

To ConTacT mE @ wWw.Asb-May.net/bb ScRiPt:-http://cazalet.org/zebrafeeds/releases/zebrafeeds-current.zip Discovered By:- ThE dE@Th aggregator.php:- requireonce$zfpath . 'includes/feed.php'; requireonce$zfpath . 'includes/view.php'; requireonce$zfpath . 'includes/template.php'; requireonce$zfpath...

CVE-2006-4735

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for 1 rssfetch.inc.php or 2 rssparse.inc.php, which reveals the path in various error messages...

CVE-2006-4735

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for 1 rssfetch.inc.php or 2 rssparse.inc.php, which reveals the path in various error messages...

CVE-2006-4735

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for 1 rssfetch.inc.php or 2 rssparse.inc.php, which reveals the path in various error messages...

CVE-2006-4735

CVE-2006-4735 pertains to MagpieRSS, where remote attackers can cause information disclosure by directly requesting (1) rss_fetch.inc.php or (2) rss_parse.inc.php, triggering error messages that disclose file paths. This is an information disclosure vulnerability in MagpieRSS that exposes interna...

CVE-2006-4735

Removed by vendor...

MagpieRSS (a simple RSS integration tool) Full path vul

Hello MagpieRSS a simple RSS integration tool Full path vul magpierss/rssfetch.inc.php magpierss/rssparse.inc.php...

CVE-2005-3955

CVE-2005-3955 affects MagpieRSS 7.1 as used in blogBuddiesv 0.3 and Jaws 0.6.2, allowing remote attackers to inject arbitrary scripts via (1) the url parameter to magpie_debug.php and (2) the rss_url parameter to magpie_slashbox.php and simple_smarty.php. The documented impact is cross-site scrip...

CVE-2005-3955

Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...

CVE-2005-3955

Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...