CVE-2010-5095

Cross-site scripting XSS vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination...

CVE-2010-5095

CVE-2010-5095 is a cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x prior to 2.3.6. The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination. The vulnerability affects SilverStripe’s pagination handling and could lead t...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter...

WordPress Newsletter Manager 1.0 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

PrestaShop 1.3.6 Path Disclosure

Vulnerability ID: HTB22837 Reference: http://www.htbridge.ch/advisory/pathdisclosureinprestashop.html Product: PrestaShop Vendor: PrestaShop http://www.prestashop.com/ Vulnerable Version: Prestashop 1.3.6 final Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure Risk level:...

HTB22837: Path disclosure in PrestaShop

Vulnerability ID: HTB22837 Reference: http://www.htbridge.ch/advisory/pathdisclosureinprestashop.html Product: PrestaShop Vendor: PrestaShop http://www.prestashop.com/ Vulnerable Version: Prestashop 1.3.6 final Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure Risk level:...

Xplico v0.6.1 - Network Forensic Analysis Tool (NFAT)

"The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn't a network protocol analyzer. Xplico is...

织梦(dedecms)V5.5分页处理函数信息泄露漏洞

系统用intval对$pageno的值进行了处理，但是intval处理过程中，如果为非正整数时，会赋值为0，系统就会出错。 $pageno = isset$pageno && isnumeric$pageno ? max1,$pageno : 1; 没有对0进行过滤处理。 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-15,15' at line 7 - Execu...

php168 v2008 default setting of the disaster-vulnerability warning-the black bar safety net

index.php Section 6 3 line start 1. elseif$webdbNewsMakeHtml==1 //if it is to generate static and... 2. 3. $content=obgetcontents; 4. obendclean; 5. obstart; //spare 6. $content=makehtml$content,'index'; 7. echo "$content"; 8. makehtml function code 1. function makehtml$content,$pagetype=" 2...

FLV Players Multiple Input Validation Vulnerabilities

Produce : FLV Players 8 Website : http://www.videospark.com + Fullpath Disclosure : 1 http://localhost/flv8/paginate.php Fatal error: Class simplepagemaker: Cannot inherit from undefined class object in /var/www/zero/httpdocs/flv8/paginate.php on line 45 2...