CVE-2010-3070

CVE-2010-3070 affects MantisBT that bundles NuSOAP 0.9.5, enabling a remote XSS via PATH_INFO to PHP scripts using NuSOAP classes. The vulnerability arises from NuSOAP in MantisBT not sanitizing user input passed to nusoap.php, allowing injection of arbitrary HTML/script. Public references and Op...

CVE-2010-3070

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...

CVE-2010-3070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...

PT-2010-4524 · Php · Nusoap

Name of the Vulnerable Software and Affected Versions: NuSOAP version 0.9.5 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to an arbitrary PHP script that uses NuSOAP classes. This could potentially lead to unauthoriz...

Fedora 14 : php-nusoap-0.9.5-1.fc14 (2010-14058)

fixes XSS vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 12 : php-nusoap-0.9.5-1.fc12 (2010-14098)

fixes XSS vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 13 : php-nusoap-0.9.5-1.fc13 (2010-14100)

fixes XSS vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 14 Update: php-nusoap-0.9.5-1.fc14

NuSOAP is a rewrite of SOAPx4, provided by NuSphere and Dietrich Ayala. It is a set of PHP classes - no PHP extensions required - that allow developers to create and consume web services based on SOAP 1.1, WSDL 1.1 and HTTP 1.0/1. 1...

[SECURITY] Fedora 13 Update: php-nusoap-0.9.5-1.fc13

NuSOAP is a rewrite of SOAPx4, provided by NuSphere and Dietrich Ayala. It is a set of PHP classes - no PHP extensions required - that allow developers to create and consume web services based on SOAP 1.1, WSDL 1.1 and HTTP 1.0/1. 1...

[SECURITY] Fedora 12 Update: php-nusoap-0.9.5-1.fc12

NuSOAP is a rewrite of SOAPx4, provided by NuSphere and Dietrich Ayala. It is a set of PHP classes - no PHP extensions required - that allow developers to create and consume web services based on SOAP 1.1, WSDL 1.1 and HTTP 1.0/1. 1...

NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Google API Search XSS vuln.

Google API Search XSS vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/google-api-search-xss-vuln.html Vendor:http://www.wwwsearchsolutions.com/google.php affected version:v1.3.1 and prior Product Description: With this script you can be up an...