XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the French company XWiki. A security vulnerability exists in XWiki Platform that originates from the fact that any user with editing privileges on a page can execute arbitrary Groovy, Python, or Velocity...

Gleezcms Gleez Cms Cross Site Scripting Vulnerability

Gleezcms Gleez Cms is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the Profile page of Gleezcms Gleez Cms version 1.3.0. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via the Profile page...

CVE-2018-1999021

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting XSS vulnerability in Profile page that can result in Inject arbitrary web script or HTML via the profile page editor. This attack appear to be exploitable via The victim must navigate to the attacker's profile page...

XSS in page editor via Shortcut links

Steps to reproduce: 1. add new shortcuts with default alias like "". 2. by typing searchterms@aliasname in page editor you can trigger XSS By replacing existing shortcut with malicious one, we can easily exploit multiple users using this functionality...

XSS in page editor via Shortcut links

Steps to reproduce: 1. add new shortcuts with default alias like "". 2. by typing searchterms@aliasname in page editor you can trigger XSS By replacing existing shortcut with malicious one, we can easily exploit multiple users using this functionality...

Microsoft Fax Cover Page Editor <= 5.2.3790.3959 Double Free Memory Corruption

No description provided by source. Source: http://aluigi.org/adv/fxscover1-adv.txt Luigi Auriemma Application: Microsoft Fax Cover Page Editor http://windows.microsoft.com/en-US/windows-vista/Create-or-edit-a-fax-cover-page Versions: = 5.2.3790.3959 Platforms: Windows Bug: double free Exploitatio...

Microsoft Windows Fax Services Cover Page Editor (.cov) Memory Corruption

No description provided by source. ?php / Microsoft Windows Fax Services Cover Page Editor .cov Memory Corruption poc by Andrea Micalizzi aka rgod tested on: Microsoft Windows Server 2003 Standard Edition r2 sp2 all patched vulnerability: Microsoft Cover Page Editor fxscover.exe, version 5.2 r2...

CVE-2014-2916

Cross-site request forgery CSRF vulnerability in the subscription page editor spageedit in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the subscription page editor spageedit in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/...

CVE-2014-2916

Cross-site request forgery CSRF vulnerability in the subscription page editor spageedit in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a request to admin/...

CVE-2014-2916

CVE-2014-2916 affects phpList’s subscription page editor (spageedit) up to version 3.0.6. The issue is a Cross-site request forgery (CSRF) that enables an attacker to hijack an administrator’s session via a request to admin/. The vulnerability is triggered through authenticated admin actions, ena...

MLS Property Finder Improper Access Control

=========================================================== MLS Property Finder Improper Access Control Vulnerability =========================================================== :----------------------------------------------------------------------------------------------------------------------...

Microsoft Windows multiple security vulnerabilities

SMB client and server memory corruption, Fax Cover Page Editor memory corruption, MFC library unsafe DLL loading, MHTML library information leak, GDI+ library integer overflow, DNS client memory corruption, memory corruption in .Net Framework, memory corruption in JScript / VBScript engines, stac...

Microsoft Windows Fax Cover Page Editor远程代码执行漏洞(MS11-024)

BUGTRAQ ID: 45583 CVE ID: CVE-2010-3974 Microsoft Windows Fax Cover Page Editor用于个性化传真以及呈现更正式外观的传真传输。 Microsoft Windows Fax Cover Page Editor在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，造成拒绝服务。 传真首页编辑器错误解析特制传真首页时存在远程代码执行漏洞，成功利用任何漏洞的攻击者可以获得与本地用户相同的用户权限。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft...

CVE-2010-3974

fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary...

CVE-2010-3974

CVE-2010-3974 is a memory corruption vulnerability in the Windows Fax Cover Page Editor (fxscover.exe) that occurs when parsing crafted Fax cover pages (.cov). A remote attacker could execute arbitrary code on affected systems by convincing a user to open a malicious fax cover page file. Affected...

Windows Fax Cover Page Editor Remote Code Execution Vulnerability (2527308)

This host is missing a critical security update according to Microsoft Bulletin MS11-024. OpenVAS Vulnerability Test $Id: secpodms11-024.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Fax Cover Page Editor Remote Code Execution Vulnerability 2527308 Authors: Antu Sanadi Updated By: Antu sanadi...

Windows Fax Cover Page Editor Remote Code Execution Vulnerability (2527308)

This host is missing a critical security update according to Microsoft Bulletin MS11-024. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2011-1459 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

MS11-024: Vulnerability in Windows Fax Cover Page Editor could allow remote code execution: April 12, 2011

Resolves a vulnerability in Windows that could allow remote code execution if a user opened a specially crafted fax cover page file .cov by using Windows Fax Cover Page Editor.Support for Windows Vista Service Pack 1 SP1 ends on July 12, 2011. To continue receiving security updates for Windows,...