Multiple Vulnerabilities in PluXml

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PluXml which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in PluXml 1.1 The vulnerability exists due to input sanitation...

Pluxml-Blog Beta 4.2 XSS

Script Name : Pluxml-blog Version : Pluxml-blog bêta 4.2 Bug Type : XSS vulnerability Found by : Metropolis Discovered : 17 December 2009 Download app : http://telechargements.pluxml.org/pluxml-blog-beta4-2.zip PoC : http://target/path/core/admin/auth.php?p=1Xss example :...

Pluxml-Blog B鳡 4.2 XSS Vulnerability

No description provided by source. Script Name : Pluxml-blog Version : Pluxml-blog bêta 4.2 Bug Type : XSS vulnerability Found by : Metropolis Discovered : 17 December 2009 Download app : http://telechargements.pluxml.org/pluxml-blog-beta4-2.zip PoC : http://target/path/core/admin/auth.php?p=1Xss...

Pluxml-Blog 4.2 - '/core/admin/auth.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37384/info Pluxml-Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Pluxml-Blog 4.2 - coreadminauth.php Cross-Site Scripting

Pluxml-Blog 4.2 - coreadminauth.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37384/info Pluxml-Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

Pluxml 0.3.1 Remote Code Execution Exploit

No description provided by source. ?php This file require the PhpSploit class. If you want to use this class, the latest version can be downloaded from acid-root.new.fr. Note: The new version is compatible with PHP 4 by default. errorreportingEALL ^ ENOTICE; require'phpsploitclass.php'; C:...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-3542

Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-3542

Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2007-3542

Removed by vendor...

CVE-2007-3542

CVE-2007-3542 is a cross-site scripting (XSS) vulnerability in Pluxml 0.3.1, located in admin/auth.php, exploitable by supplying a crafted msg parameter. The NVD entry lists a MEDIUM risk (CVSSv2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base score 4.3) with no authentication required and no impact on confide...

CVE-2007-3542: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Pluxml Images.PHP远程文件包含漏洞

Eva-Web是一款基于PHP的WEB应用程序。 Eva-Web不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP3'脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 SPIP-Education EVA-Web 2.1.2 SPIP-Education EVA-Web 2.2 SPIP-Education EVA-Web 2.1 SPIP-Education EVA-Web 2.0 目前没有详细解决方案提供：...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2007-3432

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2007-3432: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2007-3432

CVE-2007-3432 is an actual vulnerability in Pluxml 0.3.1 where an unrestricted file upload in admin/images.php allows remote attackers to upload and execute arbitrary PHP code by using a .jpg filename. The NGDV/NVD entry confirms the impact as partial confidentiality, integrity, and availability ...

CVE-2007-3432

Removed by vendor...

CVE-2007-3432

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

Pluxml 0.3.1 Remote Code Execution Exploit

?php This file require the PhpSploit class. If you want to use this class, the latest version can be downloaded from acid-root.new.fr. Note: The new version is compatible with PHP 4 by default. errorreportingEALL ^ ENOTICE; require'phpsploitclass.php'; C: sploit.php -url...