[security bulletin] HPSBMA02617 SSRT100338 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Cross SIte Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02655735 Version: 1 HPSBMA02617 SSRT100338 rev.1 - HP Discovery & Dependency Mapping Inventory DDMI Running on Windows, Remote Cross SIte Scripting XSS NOTICE: The information in this Security...

MODx REvolution CMS 2.0.4-pl2 - POST injection Cross-Site Scripting

MODx REvolution CMS 2.0.4-pl2 - POST injection Cross-Site Scripting getObject'modUser',array 30: 'username' = $POST'username', 31: ; ... 71: else if !empty$POST'forgotlogin' 72: $c = $modx-newQuery'modUser'; 73: $c-selectarray'modUser.','Profile.email','Profile.fullname'; 74: $...

MODx REvolution CMS 2.0.4-pl2 - POST injection Cross-Site Scripting

getObject'modUser',array 30: 'username' = $POST'username', 31: ; ... 71: else if !empty$POST'forgotlogin' 72: $c = $modx-newQuery'modUser'; 73: $c-selectarray'modUser.','Profile.email','Profile.fullname'; 74: $c-innerJoin'modUserProfile','Profile'; 75: $c-wherearray...

eXV² Content Management System 2.10 Remote XSS Vulnerability

Summary eXV² is a free CMS for building and operating private home pages, small and large communities and it's also easily used for small to medium business presences. Description The CMS suffers from a remote reflected Cross-Site Scripting vulnerability when input passed thru "rssfeedURL" and...

CVE-2010-3262: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...

DEBIAN-CVE-2010-2480

Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...

Xplico 0.5.7 - 'add.ctp' Cross-Site Scripting (1)

Xplico v0.5.7 add.ctp Remote XSS Vulnerability Title: Xplico v0.5.7 add.ctp Remote XSS Vulnerability Type: Remote Impact: Cross-Site Scripting Release Date: 02.07.2010 Release mode: Coordinated release Summary ======= The goal of Xplico is extract from an internet traffic capture the applications...

Xplico 0.5.7 - add.ctp Cross-Site Scripting (1)

Xplico 0.5.7 - add.ctp Cross-Site Scripting 1 Xplico v0.5.7 add.ctp Remote XSS Vulnerability Title: Xplico v0.5.7 add.ctp Remote XSS Vulnerability Type: Remote Impact: Cross-Site Scripting Release Date: 02.07.2010 Release mode: Coordinated release Summary ======= The goal of Xplico is extract fro...

Xplico 0.5.7 (add.ctp) Remote XSS Vulnerability

Summary The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer...

CVE-2010-1143: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VMware View formerly Virtual Desktop Manager or VDM 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1606: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...

Stash 1.0.3 Cross Site Scripting

Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria http://english.islamweb.net/ Script Information: Script: Stash 1.0.3 Remote XSS Vulnerability Language: PHP Download: http://garr.dl.sourceforge.net/project/nice-stash/Stash%20CMS/1.0.3/stash-1.0.3.zip Vul Code: footer.inc.php: "My In...

You!Hostit! Template for Joomla! Remote XSS attack

Exploit for unknown platform in category web applications ================================================== You!Hostit! Template for Joomla! Remote XSS attack ================================================== Example:...

CVE-2009-4069: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2684: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Jetdirect and the Embedded Web Server EWS on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the 1 ProductURL or 2 TechURL parameter in an Apply action t...

RSSMediaScript Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || RSSMediaScript Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.rssmediascript.com/ Greetings : Mizoz, Zuka,...

Ardguest 1.8 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Ardguest 1.8 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.promosi-web.com/script/guestbook/ Greetings :...

Datemill 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Datemill 1.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.datemill.com/ Greetings : Mizoz, Zuka, str0ke,...

Match Agency BiZ 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Match Agency BiZ 1.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.matchagency.biz/ Greetings : Mizoz,...

BuyDatingSite 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || BuyDatingSite 1.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.buy-dating-site.com/ Greetings : Mizoz,...