PT-2013-1991 · WordPress · My Calendar

Name of the Vulnerable Software and Affected Versions: My Calendar plugin versions prior to 1.10.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO, potentially leading to cross-site scripting XSS attacks. Recommendations: For My Calendar...

PT-2013-1470

Name of the Vulnerable Software and Affected Versions X3 CMS versions 0.4.3.1 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the PATH INFO, username, or password...

PT-2013-1992

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to various files, including "themes/default/tile search/index.tmpl.php", "login.php",...

PT-2013-1846

Name of the Vulnerable Software and Affected Versions Elite Bulletin Board versions prior to 2.1.22 Description The issue concerns SQL injection vulnerabilities in the update whosonline reg and update whosonline guest functions. These vulnerabilities allow remote attackers to execute arbitrary SQ...

PT-2013-1832

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.0.x through 4.0.9 ownCloud versions 4.5.x through 4.5.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "apps/bookmark/index.php"...

PT-2012-3796

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x-1.x before 6.x-1.15 Drupal versions 7.x-1.x before 7.x-1.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. The vulnerability is likely related to the PA...

PT-2012-6079

Name of the Vulnerable Software and Affected Versions TP-LINK TL-WR841N router versions 3.13.9 build 120201 Rel.54965n and earlier Description A directory traversal issue exists in the web-based management feature, allowing remote attackers to read arbitrary files by including a .. dot dot in the...

PT-2012-5464

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the PATH INFO to index.php. Recommendations For versio...

PT-2012-2191

Name of the Vulnerable Software and Affected Versions BrowserCRM versions 5.100.01 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to several API endpoints, such as "index.php", "modules/admin/admin module...

PT-2012-2206

Name of the Vulnerable Software and Affected Versions appRain CMF version 0.1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the PATH INFO in the quickstart/profile/index.php file within the Forum module. Recommendations For appRain CMF...

PT-2012-1312

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.6.9 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". Recommendations...

PT-2012-5938

Name of the Vulnerable Software and Affected Versions Limny version 3.0.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the PATH INFO, related to the PHP SELF variable. Recommendations For Limny version 3.0.1, consider...

PT-2012-5929

Name of the Vulnerable Software and Affected Versions asaanCart version 0.9 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various means, including the PATH INFO to specifi...

PT-2012-1992

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5.12 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the PATH INFO. Recommendations For versions prior to 1.5.12, update ...

PT-2012-2991

Name of the Vulnerable Software and Affected Versions ImpressCMS versions 1.2.x through 1.2.7 Final ImpressCMS versions 1.3.x through 1.3.1 Final Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to specific API endpoints, including...

CVE-2012-5226

Multiple cross-site scripting XSS vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the 1 motclef parameter to achat/recherche.php or 2 PATHINFO to index.php...

PT-2012-2994

Name of the Vulnerable Software and Affected Versions OneOrZero AIMS version 2.8.0 and possibly earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". This could potentially lead to unauthorized actions...

PT-2012-5769

Name of the Vulnerable Software and Affected Versions HServer version 0.1.1 Description A directory traversal issue allows remote attackers to read arbitrary files. This can be achieved by using a 1 ..%5c dot dot encoded backslash or 2 %2e%2e%5c encoded dot dot backslash in the PATH INFO...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 login.php, 2 admin.php, or 3 preferences.php...

PT-2012-2167

Name of the Vulnerable Software and Affected Versions Social Book Facebook Clone 2010 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO parameter to several API endpoints, including "/signup.php", "/lostpass.php", "/login.php", "/index.php",...