Auction RSS Content Script - 'rss.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44267/info JCE-Tech Auction RSS Content Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073

CVE-2008-7073 concerns a PHP remote file inclusion in the RSS module 0.1 for Pie Web Maesher. The root cause is that when register_globals is enabled, the lib parameter can be controlled to point to a URL, allowing an attacker to execute arbitrary PHP code on the server. The vulnerability targets...

Feed Sidebar Firefox Extension - Privileged Code Injection

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Feed Sidebar Firefox Extension Code Injection Vulnerability Versions affected: 3.2 +-----------+ |Description| +-----------+ The Feed Sidebar Firefox extension will generate a previ...

[SECURITY] Fedora 10 Update: blam-1.8.5-13.fc10

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 10 Update: evolution-rss-0.1.2-9.fc10

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 11 Update: blam-1.8.5-13.fc11

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 11 Update: evolution-rss-0.1.2-12.fc11

This is an evolution plugin which enables evolution to read rss feeds...

Mob RSS Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

URA 3.0 - 'cat' SQL Injection

--------------------------------------------------- URA 3.0 cat remote SQL injection Vulnerability --------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam + Vulnerability : SQL injection ---------info...

[SECURITY] Fedora 10 Update: blam-1.8.5-12.fc10

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

[SECURITY] Fedora 10 Update: evolution-rss-0.1.2-8.fc10

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 11 Update: evolution-rss-0.1.2-11.fc11

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 11 Update: blam-1.8.5-12.fc11

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

openSUSE Security Update : cups (cups-322)

local users could crash cups by adding a large number of RSS subscriptions CVE-2008-5183, CVE-2008-5184. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-322. The text description of this...

openSUSE Security Update : cups (cups-356)

Previous updates for the PNG and HPGL filters were incomplete and are corrected now. Also cups used a guest user account for RSS subscriptions which made it eeasier for attackers to conduct CSRF attacks. CVE-2008-3641, CVE-2008-5184, CVE-2008-5286 %NASLMINLEVEL 70300 C Tenable Network Security,...

[Full-disclosure] [NETRAGARD SECURITY ADVISORY] [< Safari 3.2.3 Arbitrary Code Execution + PoC ][NETRAGARD-20090622]

NETRAGARD ADVISORY http://www.netragard.com "The Specialist in Anti- Hacking" Advisory Summary --------------------------------------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Researcher : Kevin Finisterre Advisory ID : NETRAGARD-20090622...

Sql injection

SQL injection vulnerability in the iJoomla RSS Feeder comijoomlarss component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php...