DSA-2597-1 rails - input validation error

Bulletin has no description...

Finecms1. 7 3 The code of audit summary of the defect packaged and fixed-vulnerability warning-the black bar safety net

FineCMS is a paragraph based on PHP+MySql development of content management system, using the MVC design pattern to implement business logic with the presentation layer of the appropriate separation, so that web designers can easily design the ideal template, plug-in development features...

Ruby on Rails 'select_tag()'方法跨站脚本执行漏洞

BUGTRAQ ID: 54959 CVE ID: CVE-2012-3463 Ruby on Rails简称RoR或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 Ruby on Rails 3.0.17之前的3.x版本、3.1.8之前的3.1.x版本、3.2.8之前的3.2.x版本内actionpack/lib/actionview/helpers/formtaghelper.rb在实现上存在XSS漏洞，可允许远程攻击者通过prompt字段注入任意Web脚本或HTML到selecttag帮助程序。 0 Ruby on Rails Ruby o...

Apache Struts 2 ConversionErrorInterceptor Java Injection

Added: 08/02/2012 CVE: CVE-2012-0391 OSVDB: 78277 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. Problem Struts uses...

Apache Struts 2 ConversionErrorInterceptor Java Injection

Added: 08/02/2012 CVE: CVE-2012-0391 OSVDB: 78277 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. Problem Struts uses...

Ruby on Rails 'authenticate_or_request_with_http_digest'方法拒绝服务漏洞

BUGTRAQ ID: 54704 CVE ID: CVE-2012-3424 Ruby on Rails简称RoR或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 Ruby on Rails 3.0.16、3.1.7、3.2.7之前版本在使用了"withhttpdigest" 控制器助手方法的actionpack/lib/actioncontroller/metal/httpauthentication.rb中存在错误，可被恶意用户利用造成拒绝服务。 0 Ruby on Rails 3.2.x Ruby on Rails 3.1.x Ruby ...

Ruby on Rails嵌套参数SQL注入漏洞

CVE ID: CVE-2012-2694,CVE-2012-2695 Ruby on Rails简称RoR或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 Ruby on Rails 3.2.6、3.1.6、3.0.14之前版本在SQL查询中使用了没有正确验证的输入，这些输入是通过嵌套查询参数传递到Active Record接口的，通过注入SQL代码操作SQL查询。在使用ActionPack时参数解析Rack的方式中也存在漏洞，可允许插入"IS NULL"到SQL查询。 0 Ruby on Rails 3.2.x Ruby on Rails...

pyrocms 2.1.1 - Multiple Vulnerabilities

pyrocms 2.1.1 - Multiple Vulnerabilities PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it w...

A hotel CMS injection 0day-vulnerability warning-the black bar safety net

White-box in some sense, also TM is the individual force of life, the MVC framework let a person see uncomfortable. Test code: 1. http://www.xxx.com/index.php?m=liansuohotel&cityid=5 3%20and%2 0 1=2%20union%20select%2 0 1,concatusername,0x3a,password,3,4,5,6,7,8,9,1 0%20from%20zhunaadmin Copy the...

A hotel CMS sql inj 0day-vulnerability warning-the black bar safety net

White-box in some sense, also TM is the individual force of life, the MVC framework let a person see uncomfortable. poc: 1. index. php? m=liansuohotel&cityid=5 3%20and%2 0 1=2%20union%20select%2 0 1,concatusername,0x3a,password,3,4,5,6,7,8,9,1 0%20from%20zhunaadmin Copy the code Keywords: 1...

FreeBSD : typo -- XSS (67516177-88ec-11e1-9a10-0023ae8e59f0)

Typo Security Team reports : Failing to properly encode the output, the default TYPO3 Exception Handler is susceptible to Cross-Site Scripting. We are not aware of a possibility to exploit this vulnerability without third party extensions being installed that put user input in exception messages...

Cross-Site Scripting Vulnerability in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting. Component Type: TYPO3 Core Affected Versions: 4.4.0 up to 4.4.14, 4.5.0 up to 4.5.14, 4.6.0 up to 4.6.7 and development releases of the 4.7 branch. Vulnerable subcomponent: Exception Handler Vulnerability Type: Cross-Si...

typo -- Cross-Site Scripting

Typo Security Team reports: Failing to properly encode the output, the default TYPO3 Exception Handler is susceptible to Cross-Site Scripting. We are not aware of a possibility to exploit this vulnerability without third party extensions being installed that put user input in exception messages...

Apache Struts 2 ParametersInterceptor OGNL Command Injection

Added: 03/26/2012 CVE: CVE-2011-3923 BID: 51628 OSVDB: 78109 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. Problem...

Ruby on Rails多个跨站脚本执行漏洞

BUGTRAQ ID: 52264 Ruby on Rails简称RoR或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 通过SafeBuffer直接操作传递的输入没有正确过滤，通过手动生成的选择标签传递的某些输入没有正确过滤，导致在用户浏览器中执行任意HTML和脚本代码 0 Ruby on Rails 3.2.x Ruby on Rails 3.1.x Ruby on Rails 3.0.x 厂商补丁： Ruby ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ruby-lang.org/...

Brim 2.0.0 - SQL Injection

Brim 2.0.0 - SQL Injection BRIM 2.0.0 SQL InjectionExploit information - Exploit Title: BRIM 2.0.0 SQL Injection - Google Dork: "Brim project" intitle:"Brim - login" - Date: 2012-02-20 - Author: ifnull - Tested on: Apache/2.2.3, PHP/5.1.6, MySQL 5.0.45 � although it should work on any environment...

BRIM < 2.0.0 SQL Injection

Exploit for php platform in category web applications BRIM 2.0.0 SQL InjectionExploit information - Exploit Title: BRIM 2.0.0 SQL Injection - Google Dork: "Brim project" intitle:"Brim - login" - Date: 2012-02-20 - Author: ifnull - Tested on: Apache/2.2.3, PHP/5.1.6, MySQL 5.0.45 � although it...

Ruby on Rails Translate Helper方法跨站脚本执行漏洞

BUGTRAQ ID: 50722 Ruby on Rails简称RoR或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 Ruby on Rails在Translate Helper方法的实现上存在安全漏洞，远程攻击者可利用此漏洞在受影响站点的用户浏览器中执行任意脚本代码，窃取Cookie身份验证凭证。 Translate Helper方法将翻译字符串以html结尾的名称视为HTML安全，并具有插入机制。这些html字符串可使任意值包含在篡改的输入中，并且不可转义。 Ruby on Rails Ruby on Rails 3.x 临时解决方法：...

VELOCITY local code execution vulnerability-vulnerability warning-the black bar safety net

by emptiness prodigal heart velocity is a J2EE MVC architecture the most commonly used presentation layer template file, due to the excellent performance, very much of the J2EE Application, use this template. Usually when in use, and other framework-binding, the most common framework is struts2,...

Joomla! 1.7.0-RC and lower | Multiple Cross Site Scripting &#40;XSS&#41; Vulnerabilities

Joomla! 1.7.0-RC and lower | Multiple Cross Site Scripting XSS Vulnerabilities 1. OVERVIEW Joomla! 1.7.0-RC and versions of 1.6.x are vulnerable to multiple Cross Site Scripting issues. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the Worl...