3529 matches found
DEBIAN-CVE-2008-5278
Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...
CVE-2008-5278
Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...
CVE-2008-5278
WordPress CVE-2008-5278 affects the RSS Feed Generator (wp-includes/feed.php) prior to 2.6.5, enabling remote injection of HTML/script via HTTP_HOST. The issue is caused by unsanitized Host header, resulting in XSS in the RSS feed. Remediation: upgrade WordPress to 2.6.5 or later (per the descrip...
CVE-2008-5278
Cross-site scripting XSS vulnerability in the selflink function in in the RSS Feed Generator wp-includes/feed.php for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header HTTPHOST variable...
WordPress RSS Feed Generator Plugin <= 2.6.4 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the Host header. Solution Update the plugin...
WordPress XSS vulnerability in RSS Feed Generator
===== noXSS.org Security Advisory ====== Advisory: WordPress XSS vulnerability in RSS Feed Generator Author: Jeremias Reith [email protected] Published: 2008/11/25 Affected: WordPress 2.6.5 Summary ======= WordPress prior to v2.6.3 fails to sanitize the Host header variable correctly when generating R...
wordpress -- header rss feed script insertion vulnerability
Secunia reports: Input passed via the HTTP "Host" header is not properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site if malicious data is viewed...
Pie Web M{a,e}sher Mod Rss 0.1 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== Pie Web Ma,esher Mod Rss 0.1 Remote File Inclusion Vulnerability ================================================================== Pie Web RSS module 0.1 lib Remote File...
piewebrss-rfi.txt
Pie Web RSS module 0.1 lib Remote File injulide : download: http://pie.ekkaia.org/file/modrss-0.1.tar.gz ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...
wordpressrss-xss.txt
===== noXSS.org Security Advisory ====== Advisory: WordPress XSS vulnerability in RSS Feed Generator Author: Jeremias Reith Published: 2008/11/25 Affected: WordPress tag in ATOM and RSS 2.0 feeds: function selflink echo 'http' . $SERVER'https' == 'on' ? 's' : '' . '://' . $SERVER'HTTPHOST'...
Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion
Pie Web maesher mod rss 0.1 - Remote File Inclusion Pie Web RSS module 0.1 lib Remote File injulide : download: http://pie.ekkaia.org/file/modrss-0.1.tar.gz ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T:...
Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion
Pie Web RSS module 0.1 lib Remote File injulide : download: http://pie.ekkaia.org/file/modrss-0.1.tar.gz ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...
Pie Web M{a e}sher Mod Rss 0.1 Remote File Inclusion Vulnerability
No description provided by source. Pie Web RSS module 0.1 lib Remote File injulide : download: http://pie.ekkaia.org/file/modrss-0.1.tar.gz ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRD...
CVE-2008-5184
The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...
Null pointer dereference
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...
CVE-2008-5184
The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...
CVE-2008-5183
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...
DEBIAN-CVE-2008-5184
The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...
Cross site request forgery (csrf)
The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...
CVE-2008-5183
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...