Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Quick Stats page psilan.cgi in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected...

CVE-2014-9021

Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...

PT-2014-8790

Name of the Vulnerable Software and Affected Versions ZTE ZXDSL versions 831 and 831CII Description A cross-site scripting XSS issue exists in the Quick Stats page, specifically in the psilan.cgi component, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by...

ZTE ZXDSL 831 Multiple Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: ZTE ZXDSL 831 Multiple Cross Site Scripting Date: 11/3/2014 Exploit Author: Paulos Yibelo Vendor Homepage: zte.com.cn Software Link: - Version: - Tested on: Windows 7 CVE :- TR-069 Client page: Stored. executes when users g...

ZTE ZXDSL 831 Multiple Cross Site Scripting

TR-069 Client page: Stored. executes when users go to http://192.168.1.1/tr69cfg.html...

ZTE ZXDSL 831 Cross Site Scripting

Exploit Title: ZTE ZXDSL 831 Multiple Cross Site Scripting Date: 11/3/2014 Exploit Author: Paulos Yibelo Vendor Homepage: zte.com.cn Software Link: - Version: - Tested on: Windows 7 CVE :- TR-069 Client page: Stored. executes when users go to http://192.168.1.1/tr69cfg.html...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Title, 2 Content, or 3 New category field to wordpress/ or 4 query string to wordpress/...

CVE-2012-4226

Multiple cross-site scripting XSS vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Title, 2 Content, or 3 New category field to wordpress/ or 4 query string to wordpress/...

CVE-2012-4226

CVE-2012-4226 concerns the WordPress Quick Post Widget plugin (version 1.9.1). The connected sources describe multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the Quick Post Widget fields (Title, Content, New category) or v...

PT-2014-2275

Name of the Vulnerable Software and Affected Versions Quick Post Widget plugin version 1.9.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the Title, Content, or New category field to "wordpress/" or the query string to "wordpress/". This can lead to...

CVE-2012-4226: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Title, 2 Content, or 3 New category field to wordpress/ or 4 query string to wordpress/...

Springboard Video Quick Publish 0.2.6 - videolist.php paged Parameter Reflected XSS

The Springboard Video Quick Publish WordPress plugin was affected by a videolist.php paged Parameter Reflected XSS security vulnerability...

Springboard Video Quick Publish 0.2.6 - springboardvideo.php video_id Parameter XSS

The Springboard Video Quick Publish WordPress plugin was affected by a springboardvideo.php videoid Parameter XSS security vulnerability...

Quick Contact Form 6.2 - Unspecified XSS

The Quick Contact Form WordPress plugin was affected by an Unspecified XSS security vulnerability...

[SECURITY] Fedora 20 Update: claws-mail-3.10.1-1.fc20

Claws Mail is an email client and news reader, based on GTK+, featuring quick response, graceful and sophisticated interface, easy configuration, intuitive operation, abundant features, and extensibility...

SA-CONTRIB-2014-067 - Meta Tags Quick - Multiple vulnerabilities

Meta tags quick adds meta tags editing to all non-administrative pages of Drupal site. Redirector abuse in path-based meta tag editing form When editing a path-based meta tag, module does not check destination parameter of the URL, allowing attacker to pass arbitrary URL to meta tag editing form...

Quick Classifieds 1.0 - controlpannel/createP.php3 DOCUMENT_ROOT Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...

Quick Classifieds 1.0 - controlpannel/index.php3 DOCUMENT_ROOT Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...

VWar <= 1.5.0 R15 - (mvcw.php) Remote File Inclusion Vulnerability

No description provided by source. '/ -.- --------------------oOO------OOo-------------------- | VWar = v1.5.0 R15 mvcw.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.vwar.de ! Detected: 26.02.2007 !...