CVE-2014-6291

Cross-site scripting XSS vulnerability in the Alphabetic Sitemap alphasitemap extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6291

CWE-like summary: The CVE-2014-6291 entry corresponds to a Cross-Site Scripting vulnerability in the TYPO3 third-party extension Alphabetic Sitemap (alpha_sitemap) versions 0.0.3 and earlier. The XSS is described with unspecified vectors and the affected component is the alpha_sitemap extension i...

CVE-2014-6291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Alphabetic Sitemap alphasitemap extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7135

Name of the Vulnerable Software and Affected Versions TYPO3 Alphabetic Sitemap alpha sitemap extension versions 0.0.3 and earlier Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieve...

CVE-2014-6240

Cross-site scripting XSS vulnerability in the Google Sitemap weeaargooglesitemap extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Google Sitemap weeaargooglesitemap extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6240

Cross-site scripting XSS vulnerability in the Google Sitemap weeaargooglesitemap extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6240

CVE-2014-6240 is an XSS vulnerability in the TYPO3 extension Google Sitemap (weeaar_googlesitemap) 0.4.3 and earlier. The connected TYPO3 bulletin confirms the affected extension and versions, and states that vulnerable extensions will no longer be available for download, but it does not provide ...

CVE-2014-6240: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Google Sitemap weeaargooglesitemap extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cool Video Gallery 1.8 - admin/video-sitemap.php XML Video Sitemap Generation CSRF

The Cool Video Gallery WordPress plugin was affected by an admin/video-sitemap.php XML Video Sitemap Generation CSRF security vulnerability...

WP HTML Sitemap 1.2 - wp-html-sitemap.html Sitemap Deletion CSRF

The wp-html-sitemap WordPress plugin was affected by a wp-html-sitemap.html Sitemap Deletion CSRF security vulnerability...

WordPress Cool Video Gallery Plugin <= 1.8 - CSRF

Cross site request forgery vulnerability is in the details.php, admin/gallery-manage.php Gallery Deletion, admin/gallery-settings.php Gallery Settings Manipulation, admin/gallery-sort.php Gallery Sort Order Manipulation, admin/player-settings.php Player Settings Manipulation,...

Sitemap Mambo Component <= 2.0.0 - Remote Include Vulnerability

No description provided by source. Sitemap 2.0.0 for Mambo 4.5.1 CMS Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access Where : From Remote...

vBSEO Sitemap 2.5 & 3.0 - Multiple Vulnerabilities

No description provided by source. vBSEO Sitemap - Multiple Vulnerabilities Versions Affected: 2.5 and 3.0 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and the only professional, fully supported solution. A full packag...

XML External Entity (XXE) Injection

Overview Scrapy is a high-level web crawling and web scraping framework, used to crawl websites and extract structured data from their pages. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the sitemap reader. Details XXE Injection is a type of attack...

WordPress HTML Sitemap插件'inc/AdminPage.php'跨站请求伪造漏洞

Bugtraq ID:66528 WordPress是一款内容管理系统。 WordPress HTML Sitemap插件存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 WordPress HTML Sitemap Plugin 1.2 目前没有详细解决方案： http://wordpress.org/plugins/wp-html-sitemap/ form...

WordPress HTML Sitemap 1.2 Cross Site Request Forgery

Details ================ Software: WP HTML Sitemap Version: 1.2 Homepage: http://wordpress.org/plugins/wp-html-sitemap/ CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N Description ================ CSRF vulnerability in WP HTML Sitemap 1.2 Vulnerability ================ A CSRF vulnerability exists...

[Skipfish] Web Application Security Scanner

Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a recursive crawl and dictionary-based probes. The resulting map is then annotated with the output from a number of active but hopefully non-disruptive...

WordPress Plugin w3-total-cache Stored XSS Vulnerability

Exploit for php platform in category web applications Steps to Produce the Vulnerability : 1 Go to Dashboard. 2 Click on Installed Plugins. 3 Go to W3-Total-Cache Plugin and Click on settings. 4 Go to Reverse Proxy and Click on page cache settings. 5 Go to Cache Preload and Type Vector - ". in...

CVE-2012-1635

The hooknodeaccess function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML...