1207 matches found
PT-2012-5044
Name of the Vulnerable Software and Affected Versions Plixer Scrutinizer versions prior to 9.5.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web console of Plixer Scrutinizer. These vulnerabilities allow remote attackers to inject arbitrary web script o...
DomsHttpd DoS
Crash on Referer: header processing...
CVE-2011-5073
Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to inject arbitrary web script or HTML via the 1 mode parameter to contactsupport.php; 2 contractid parameter to contractaddservice.php; 3 user parameter to editbackupusers.ph...
PT-2012-2051
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.65 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters and the Referer header in multiple scripts, including "contact support.php",...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...
CVE-2011-3835
Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...
CVE-2011-3835: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...
PT-2011-4719
Name of the Vulnerable Software and Affected Versions Wuzly version 2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters and headers, including the Referer header to admin/login.php and admin/404.php, the q parameter to search.php, the...
PT-2011-4990 · WordPress · Seo Redirection Plugin
Name of the Vulnerable Software and Affected Versions: Redirection plugin version 2.2.9 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the view/admin/log item.php and view/admin/log item details.php files of the Redirection...
Netvolution 2.5.8 - 'referer' Header SQL Injection
source: https://www.securityfocus.com/bid/49918/info Netvolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Netvolution 2.5.8 - referer Header SQL Injection
Netvolution 2.5.8 - referer Header SQL Injection source: https://www.securityfocus.com/bid/49918/info Netvolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...
CVE-2011-1062
Multiple cross-site scripting XSS vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sContext, 2 sort, 3 dir, and 4 show parameters in a save action to index.php; the 5 dir and 6 show parameters to printlist.php;...
TaskFreak! 0.6.4 - 'rss.php' HTTP Referer Header Cross-Site Scripting
source: https://www.securityfocus.com/bid/46350/info TaskFreak! is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
Splunk 'Referer' Header Cross-Site Scripting Vulnerability
This host is running Splunk and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsplunkxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Splunk 'Referer' Header Cross-Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH...
Design/Logic Flaw
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive...
CVE-2010-1406: Exposure of Sensitive Information to an Unauthorized Actor
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to 1 admin/adminconfig.php, 2 admin/adminmodules.php, 3 delete.php, 4 editlink.php, 5 submit.php, 6 submitgroups.php, 7...
Hardcoded credentials
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging...
CVE-2010-0660
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging...
