3415 matches found
CVE-2009-3248
Cross-site request forgery CSRF vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php...
CVE-2009-3248
The CVE-2009-3248 entry describes a CSRF vulnerability in the vtiger CRM 5.0.4 RSS module . The flaw allows remote attackers to hijack the authentication of Admin users by crafting requests to index.php with the rssurl parameter in a Save action, enabling modification of the news feed system. The...
CVE-2009-3248
Cross-site request forgery CSRF vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php...
Joomla! Component com_jlord_rss - id Blind SQL Injection
Joomla! Component comjlordrss - id Blind SQL Injection !/usr/bin/perl -w use LWP::UserAgent; use Benchmark; my $t1 = new Benchmark; print "\t\t------------------------------------------------------------\n\n"; print "\t\t | Chip d3 Bi0s | \n\n"; print "\t\t RSS Feed Creator by foobla \n\n"; print...
Joomla! Component com_jlord_rss - 'id' Blind SQL Injection
!/usr/bin/perl -w use LWP::UserAgent; use Benchmark; my $t1 = new Benchmark; print "\t\t------------------------------------------------------------\n\n"; print "\t\t | Chip d3 Bi0s | \n\n"; print "\t\t RSS Feed Creator by foobla \n\n"; print "\t\t Joomla Component comjlordrs id BSQL \n\n"; print...
Chrome/Opera ATOM/RSS Reader Script Execution
Exploiting Chrome and Operas inbuilt ATOM/RSS reader with Script Execution and more ---------------------------------------------------------------------------- --------- For complete post with images, please visit - http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomr...
Joomla Jlord RSS SQL Injection
!/usr/bin/perl -w use LWP::UserAgent; use Benchmark; my $t1 = new Benchmark; print "\t\t------------------------------------------------------------\n\n"; print "\t\t | Chip d3 Bi0s | \n\n"; print "\t\t RSS Feed Creator by foobla \n\n"; print "\t\t Joomla Component comjlordrs id BSQL \n\n"; print...
SA-CONTRIB-2009-058 - Comment RSS - Access bypass
The Comment RSS module provides RSS feeds for comments on individual nodes. The link to this feed contains the node's title. Adding the link to the RSS feed was not respecting access permissions, potentially exposing content not available otherwise. Versions affected Comment RSS for Drupal 5.x...
Fedora 11 : planet-2.0-10.fc11 (2009-9575)
Security update for sanitizing input from rss feeds. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 10 : planet-2.0-10.fc10 (2009-9601)
security patch to sanitize content from rss feeds for JavaScript Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...
CVE-2009-3191
Multiple cross-site scripting XSS vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary web script or HTML via the cat parameter to 1 rss.php and 2 opml.php...
CVE-2009-3195
Multiple cross-site scripting XSS vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rss.php and 2 search.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rss.php and 2 search.php...
CVE-2009-3195
CVE-2009-3195 affects JCE-Tech Auction RSS Content Script 3.0 with multiple XSS vulnerabilities that allow remote injection of arbitrary script/HTML via the id parameter to rss.php and search.php. The description specifies client-side impact (arbitrary script injection) but does not provide in-do...
[SECURITY] Fedora 11 Update: planet-2.0-10.fc11
Planet is a flexible feed aggregator, this means that it downloads feeds and aggregates their content together into a single combined feed with the latest news first. It uses Mark Pilgrim's Ultra-liberal feed parser so can read from RDF, RSS and Atom feeds and Tomas Styblo's template library to...
Fedora Core 11 FEDORA-2009-9575 (planet)
The remote host is missing an update to planet announced via advisory FEDORA-2009-9575. OpenVAS Vulnerability Test $Id: fcore20099575.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9575 planet Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Fedora Core 10 FEDORA-2009-9601 (planet)
The remote host is missing an update to planet announced via advisory FEDORA-2009-9601. OpenVAS Vulnerability Test $Id: fcore20099601.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9601 planet Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Google Chrome < 3.0.195.21 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 3.0.195.21. Such versions are reportedly affected by multiple issues : - Google Chrome's inbuilt RSS/ATOM reader renders untrusted JavaScript in an RSS/ATOM feed. Provided a victim connects to a RSS/ATOM feed link controlle...
Fedora Core 10 FEDORA-2009-9601 (planet)
The remote host is missing an update to planet announced via advisory FEDORA-2009-9601. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 11 FEDORA-2009-9575 (planet)
The remote host is missing an update to planet announced via advisory FEDORA-2009-9575. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...