324 matches found
CVE-2012-4674
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...
CVE-2012-4675
Cross-site scripting XSS vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update...
CVE-2012-2227
PluXml is affected by a Local File Inclusion in update/index.php before version 5.1.6. The issue arises from using the default_lang parameter in include_once(), enabling an attacker to traverse directories and include arbitrary local files. Public disclosures and exploits reference PluXml 5.1.5 (...
CVE-2012-2227: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the defaultlang parameter...
CVE-2012-4674: Exposure of Sensitive Information to an Unauthorized Actor
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...
CVE-2012-4675: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update...
PluXml 5.1.5 LFI
Local file include vulnerability in PluXml defaultlang parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Local File Inclusion in PluXml
Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE References: CVE-2012-2227 Solution...
PluXml 5.1.5 - Local File Inclusion
Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE References: CVE-2012-2227 Solution...
PluXml 5.1.5 Local File Inclusion
Exploit for php platform in category web applications Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE...
PluXml 5.1.5 - Local File Inclusion
PluXml 5.1.5 - Local File Inclusion Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CV...
PluXml 5.1.5 Local File Inclusion
Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE References: CVE-2012-2227 Solution...
Local File Inclusion in PluXml
High-Tech Bridge SA Security Research Lab has discovered vulnerabiliy in PluXml, which can be exploited to perform Local File Inclusion attacks. 1 Local File Inclusion in PluXml 1.1 Input passed via the "defaultlang" POST parameter to /update/index.php is not properly verified before being used i...
PluXml 5.0.1 Cross Site Scripting
==================================== Vulnerability ID: HTB22631 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerabilit...
XSS vulnerability in PluXml
Vulnerability ID: HTB22633 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml2.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: XSS Cross Site Scripting...
XSS vulnerability in PluXml
Vulnerability ID: HTB22634 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml3.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored XSS Cross Site...
XSS vulnerability in PluXml
Vulnerability ID: HTB22632 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml1.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: XSS Cross Site Scripting...
XSS vulnerability in PluXml
Vulnerability ID: HTB22631 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored XSS Cross Site Scripti...
PluXml 5.0.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities
PluXml 5.0.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/44069/info PluXml is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...
PluXml 5.0.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/44069/info PluXml is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTM...