EUVD-2006-6630

Malware in sbrugna...

betterlifepsi (>=0.6.7.post3, <=0.6.7.post4), filetracker (>=2.1.3, <=2.1.4) +4 more potentially affected by CVE-2024-6827 via gunicorn (19.8.1)

gunicorn PYPI version 19.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gunicorn and may be impacted: - betterlifepsi =0.6.7.post3, =2.1.3, =0.2.11, =0.6.0, =0.15.0 Source cves: CVE-2024-6827 Source advisory: OSV:GHSA-HC5X-X2VX-497G...

betterlifepsi (>=0.6.7.post3, <=0.6.7.post4), filetracker (>=2.1.3, <=2.1.4) +4 more potentially affected by CVE-2024-1135 via gunicorn (19.8.1)

gunicorn PYPI version 19.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gunicorn and may be impacted: - betterlifepsi =0.6.7.post3, =2.1.3, =0.2.11, =0.6.0, =0.15.0 Source cves: CVE-2024-1135 Source advisory: OSV:GHSA-W3H3-4RJ7-4PH4...

CVE-2023-47243

Cross-Site Request Forgery CSRF vulnerability in CodeMShop 코드엠샵 마이사이트 – MSHOP MY SITE.This issue affects 코드엠샵 마이사이트 – MSHOP MY SITE: from n/a through 1.1.6...

CVE-2023-29638

Cross Site Scripting XSS vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles...

django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-10...

django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: MEND:CVE-2021-30459...

OnePC mySite Management Software SQL Injection Vulnerability

No description provided by source. Exploit Title: OnePC mySite Management Software SQL Injection Vulnerability Date: 10.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: OnePC mySite Management Software SQL Injection Vulnerability :: by...

WordPress Theme Persuasion 2.x - Arbitrary File Download / File Deletion

Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link: http://mysitemyway.com/theme/persuasion-wordpress-theme/ Version: Tested on 2.0 and 2....

PT-2012-1399

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.7 SilverStripe versions 2.4.x through 2.4.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to PHP files in the sapphire, cms, or mysite folders, which...

MySITE - SQL Injection Cross-Site Scripting

MySITE - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/43510/info MySITE is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an...

Уязвимости в CMS MYsite

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Insufficeint Anti-automation уязвимостях в CMS MYsite это украинская коммерческая CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

MySITE - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/43510/info MySITE is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authenticati...

CMS Mysite Cross Site Scripting / SQL Injection

Hello Full-Disclosure! I want to warn you about Full path disclosure, Cross-Site Scripting and SQL Injection vulnerabilities in CMS MYsite. It's Ukrainian commercial CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

OnePC mySite Management Software SQL Injection

Exploit Title: OnePC mySite Management Software SQL Injection Vulnerability Date: 10.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: OnePC mySite Management Software SQL Injection Vulnerability :: by Valentin Hoebel :: [email protected]...

OnePC mySite Management Software SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ OnePC mySite Management Software SQL Injection Vulnerability ============================================================ :: General information :: OnePC mySite Management Software S...

OnePC mySite Management Software - SQL Injection

OnePC mySite Management Software - SQL Injection Exploit Title: OnePC mySite Management Software SQL Injection Vulnerability Date: 10.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: OnePC mySite Management Software SQL Injection...

CVE-2006-6647

Cross-site scripting XSS vulnerability in the MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x-1.3 module for Drupal allows remote attackers to inject arbitrary web script or HTML via the Title field when editing a page. NOTE: some details were obtained from third party information...

CVE-2006-6647

Cross-site scripting XSS vulnerability in the MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x-1.3 module for Drupal allows remote attackers to inject arbitrary web script or HTML via the Title field when editing a page. NOTE: some details were obtained from third party information...

CVE-2006-6647

CVE-2006-6647 is a cross-site scripting (XSS) vulnerability affecting the Drupal MySite module. Affected versions are Drupal-based MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x-1.3. The vulnerability arises in the Title field when editing a page, allowing remote attackers to inject arbitrary w...