Nagios RCE Vulnerability

Nagios is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios"; ...

newspaper-edit.wunderground.com XSS vulnerability

Vulnerable URL: http://newspaper-edit.wunderground.com/autoasp/scrapers/magpierss/scripts/magpiedebug.php?url=0%221%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

MagpieRSS 0.72 CDATA HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

MagpieRSS 0.72 Cross Site Scripting And HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the...

Elastix 2.4.0 Cross Site Scripting

Exploit Title: Elastix 2.4.0 Multiple XSS Date: 17 Nov 2013 Author: Bassem - Unshield Team Contact: Securityatunshielddotnet Software Link: http://www.elastix.org/ Version: 2.4.0 , works for same libs exist also on Elastix 3.0.0 Alpha Tested on: 2.4.0...

MagpieRSS 0.72 - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

MagpieRSS 0.72 - Cross-Site Scripting HTML Injection

MagpieRSS 0.72 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code...

MagpieRSS Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -= MagpieRSS Multiple XSS Vulnerabilities =- May 6, 2009 Author: Justin C. Klein Keane Software: MagpieRSS http://magpierss.sourceforge.net/ Version Tested: magpierss-0.72 Vendor notified Full details can also be found at...

MagpieRSS 0.72 - CDATA HTML Injection

MagpieRSS 0.72 - CDATA HTML Injection source: https://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...

MagpieRSS XSS 0day

Hello, I have found a Cross Site Scripting vulnerability in MagpieRSS, an RSS parser written in PHP, basically, this piece of software enables users to add their own RSS feeds to be parsed, so they can keep up to date with their favourite feeds, as well as the pre-defined ones. I crafted my own R...

MagpieRSS 0.72 - CDATA HTML Injection

source: https://www.securityfocus.com/bid/33044/info MagpieRSS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of th...

CVE-2007-2337

CVE-2007-2337 affects Exponent CMS 0.96.6 Alpha and earlier. The issue comprises multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via: (1) the url parameter to magpie_debug.php and magpie_simple.php (external/magpierss/scripts/...

ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ZebraFeeds 1.0 zfpath Remote File Include Vulnerabilities ============================================================ Discovered By:- ThE email protected aggregator.php:-...

ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion

To ConTacT mE @ wWw.Asb-May.net/bb ScRiPt:-http://cazalet.org/zebrafeeds/releases/zebrafeeds-current.zip Discovered By:- ThE dE@Th aggregator.php:- requireonce$zfpath . 'includes/feed.php'; requireonce$zfpath . 'includes/view.php'; requireonce$zfpath . 'includes/template.php'; requireonce$zfpath...

CVE-2006-4735

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for 1 rssfetch.inc.php or 2 rssparse.inc.php, which reveals the path in various error messages...

CVE-2006-4735

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for 1 rssfetch.inc.php or 2 rssparse.inc.php, which reveals the path in various error messages...

CVE-2006-4735

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for 1 rssfetch.inc.php or 2 rssparse.inc.php, which reveals the path in various error messages...

CVE-2006-4735

CVE-2006-4735 pertains to MagpieRSS, where remote attackers can cause information disclosure by directly requesting (1) rss_fetch.inc.php or (2) rss_parse.inc.php, triggering error messages that disclose file paths. This is an information disclosure vulnerability in MagpieRSS that exposes interna...

CVE-2006-4735

Removed by vendor...

CVE-2006-4735: Undefined Security Weakness

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for 1 rssfetch.inc.php or 2 rssparse.inc.php, which reveals the path in various error messages...