BoutikOne Multiples SQL Injection Vulnerability

BoutikOne - Multiples SQL Injection Vulnerability RELEASE DATE : 13.03.2011 by Alz cdxdotsecurityatgmaildotcom - Google Dork: "Powered by BoutikOne" - categorie.php Var path : http://target/categories.php?path=sqli - list.php Var path : http://target/list.php?path=sqli - description.php Var id :...

BoutikOne - rss_flash.php?lang SQL Injection

BoutikOne - rssflash.php?lang SQL Injection source: https://www.securityfocus.com/bid/46861/info Pixie is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

SOL12636 - Slowloris denial-of-service attack vulnerability CVE-2007-6750

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not list any version...

TaskFreak! 0.6.4 - Multiple Cross-Site Scripting Vulnerabilities

TaskFreak! 0.6.4 - Multiple Cross-Site Scripting Vulnerabilities TaskFreak! v0.6.4 Multiple Cross-Site Scripting Vulnerabilities Vendor: Stan Ozier Product web page: http://www.taskfreak.com Affected version: 0.6.4 multi-user Summary: TaskFreak! Original is a simple but efficient web based task...

WordPress RSS Feed Reader Plugin 'rss_url' Parameter Cross Site Scripting Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

CVE-2011-0740

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

UBUNTU-CVE-2011-0740

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

CVE-2011-0740

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

CVE-2011-0740

CVE-2011-0740 is a Cross-site Scripting (XSS) vulnerability in the WordPress RSS Feed Reader Plugin 0.1, specifically in the magpie/scripts/magpie_slashbox.php file and its rss_url parameter. Attackers could inject arbitrary JavaScript/HTML in a victim’s browser. The issue is confirmed by multipl...

CVE-2011-0740

Removed by vendor...

WordPress RSS Feed Reader For WordPress 0.1 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress RSS Feed Reader for WordPress 0.1 Vulnerability...........Reflected Cross-site Scripting Download................http://pleer.co.uk/wordpress/plugins/rss-feed-reader Release...

WordPress Plugin RSS Feed Reader 0.1 - rss_url Cross-Site Scripting

WordPress Plugin RSS Feed Reader 0.1 - rssurl Cross-Site Scripting source: https://www.securityfocus.com/bid/45997/info The RSS Feed Reader WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress RSS Feed Reader Plugin 0.1 - Cross-Site Scripting Vulnerability

This RSS Feed Reader plugin's "rssurl" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin RSS Feed Reader 0.1 - 'rss_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45997/info The RSS Feed Reader WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

phpCMS 9.0 - Blind SQL Injection

phpCMS 9.0 - Blind SQL Injection ================================================================= phpcms V9 BLind SQL Injection Vulnerability ================================================================= Software: phpcms V9 Vendor: www.phpcms.cn Vuln Type: BLind SQL Injection Download link:...

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors...

Mingle Forum SQL Injection / Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors Contacted: Paul Carter - Maintainer of plugin. 2. Summary Mingle...

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors Contacted: Paul Carter - Maintainer of plugin. 2. Summary Mingle...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST...