50 matches found
CVE-2019-15826
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...
CVE-2018-19877
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field...
CVE-2018-19877
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field...
CVE-2018-19877
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field...
Input validation
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field...
CVE-2018-15700
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service when an unauthenticated LAN user sends a crafted HTTP header containing an unexpected Referer field...
CVE-2018-15700
The CVE-2018-15700 issue affects TP-Link TL-WRN841N running 0.9.1 4.16 v0348.0 where an unauthenticated LAN user can trigger a denial of service by sending a crafted HTTP header with an unexpected Referer field. Public documentation/connected sources describe the vulnerability in the device web i...
CVE-2018-15702
The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field...
SmarterStats 11.3.6347 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications ---------------------------- Title: CVE-2017-14620 ---------------------------- TL;DR: SmarterStats Version 11.3.6347, and possibly prior versions, will Render the Referer Field of HTTP Logfiles in URL /Data/Reports/ReferringURLsWithQueries...
CVE-2017-14620
SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting...
Cross site scripting
SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting...
Eshbel Priority MarketGate module Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Eshbel Priority MarketGate module Cross Site Scripting Vulnerability ==================================================================== ===================== I...
Eshbel Priority MarketGate module Cross Site Scripting Vulnerability
========================================= Yaniv Miron aka "Lament" Advisory Feb 27, 2010 Eshbel Priority MarketGate module Cross Site Scripting Vulnerability ========================================= ===================== I. BACKGROUND ===================== Priority’s ERP The features listed belo...
Citrix Access Gateway information leak
HTTP session cookie is passed through HTTP GET request parameters, making it possible to leak it value thorugh Referer: field or in the browsing history...
WordPress自动统计模块Referer字段HTML注入漏洞
WordPress是一款基于WEB的BLOG系统。 基于WordPress上的自动统计模块不正确处理用户提交的输入，远程攻击者可以利用漏洞进行HTML注入攻击，获得敏感信息。 问题是由于不正确过滤用户生成的HTTP头字段中的Referer参数数据，提交恶意的HTTP数据，并诱使用户访问，可导致获得目标用户敏感信息。 Skeltoac Automattic Stats 1.0 可联系供应商获得补丁信息： http://wordpress.org/extend/plugins/stats/ GET http://www.somewpblog.com/ HTTP/1.1...
Cross site scripting
Cross-site scripting XSS vulnerability in the skeltoac stats Automattic Stats 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field...
CVE-2006-4798
SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history...
CVE-2006-4798
SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history...