CVE-2013-4753: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field in an inbox action to messaging/messagebox.php, 2 the "First name" field to auth/profile.php, or 3 the Speakers field in...

CVE-2014-8307

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

CVE-2014-6029

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...

Code injection

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...

Code injection

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...

CVE-2014-6029

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...

CVE-2014-6029

CVE-2014-6029 affects TorrentFlux 2.4. The vulnerability arises in the editCookies action to profile.php, where the cid parameter allows remote authenticated users to delete or modify other users’ cookies. Reported impact includes partial integrity risk of cookies; confidentiality/availability im...

PT-2014-7011

Name of the Vulnerable Software and Affected Versions TorrentFlux version 2.4 Description The issue allows remote authenticated users to obtain other users' cookies via the cid parameter in an "editCookies action" to "profile.php". Recommendations For TorrentFlux version 2.4, consider restricting...

PT-2014-7012

Name of the Vulnerable Software and Affected Versions TorrentFlux version 2.4 Description The issue allows remote authenticated users to delete or modify other users' cookies. This can be achieved by manipulating the cid parameter in an editCookies action to the "profile.php" endpoint...

CVE-2014-6028: Improper Input Validation

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...

CVE-2014-6029: Improper Input Validation

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...

WP-Members 2.8.9 - profile.php Multiple Parameter Stored XSS

The WP-Members Membership Plugin WordPress plugin was affected by a profile.php Multiple Parameter Stored XSS security vulnerability...

WordPress Members Plugin <= 2.8.9 - Stored XSS

This plugin is prone to a cross site scripting vulnerability in profile.php. Solution Update the plugin...

CVE-2014-3544

Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...

CVE-2014-3544

CVE-2014-3544 is a cross-site scripting (XSS) vulnerability in Moodle’s user/profile.php that enables remote authenticated users to inject arbitrary script or HTML via the Skype ID profile field. Affected versions include Moodle up to 2.3.11 and 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x befo...

PT-2014-5382

Name of the Vulnerable Software and Affected Versions Moodle versions 2.3.11 and earlier, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, 2.7.x before 2.7.1 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the...

CVE-2014-3544: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...

webSPELL <= 4.01.02 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print \n \'/ ; print \n -.- ; print \n -------------------oOO------OOo--------------------; print \n | webSPELL = v4.01.02 Multiple Remote SQL Injection |; print \n | coded by DNX |; print \n...

phpMDJ 1.0.3 - SQL Injection Vulnerability

No description provided by source. ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection ...