Open redirect

Open redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the TargetResource parameter...

DEBIAN-CVE-2014-9219

Cross-site scripting XSS vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

UBUNTU-CVE-2014-9219

Cross-site scripting XSS vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-9219

Cross-site scripting XSS vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-9219: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

PT-2014-8925

Name of the Vulnerable Software and Affected Versions Alfresco Community Edition versions prior to 5.0.a Description A cross-site request forgery CSRF issue exists in the cmisbrowser servlet in Content Management Interoperability Service CMIS that allows remote attackers to hijack user...

CVE-2014-9300: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user...

PT-2014-8927

Name of the Vulnerable Software and Affected Versions Alfresco Community Edition versions 5.0.a and earlier Description A server-side request forgery SSRF issue exists due to a vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS. This allows remote attacke...

CVE-2014-9302: Undefined Security Weakness

Server-side request forgery SSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outbound requests via a crafted URI in the url parameter...

PT-2014-8924

Name of the Vulnerable Software and Affected Versions jRSS Widget plugin version 1.2 and earlier for WordPress Description A server-side request forgery SSRF issue allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter. Recommendations For jRSS Widget...

CVE-2014-9292: Undefined Security Weakness

Server-side request forgery SSRF vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter...

PT-2014-8884

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.2.x through 4.2.13.0 Description A cross-site scripting XSS issue exists in the redirection feature of url.php, allowing remote attackers to inject arbitrary web script or HTML via the url parameter. Recommendations For...

CVE-2014-8754

Open redirect vulnerability in track-click.php in the Ad-Manager plugin 1.1.2 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the out parameter...

phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities

phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.5 Vendor Link:...

Open redirect

Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

PT-2014-8676

Name of the Vulnerable Software and Affected Versions vBulletin version 4.2.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. This can be exploited by providing a malicious URL to the vulnerable...

CVE-2014-8670: Undefined Security Weakness

Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

Open redirect

Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 dest parameter to adclick.php or 2 maxdest parameter to ck.php...

Open redirect

Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 2.1.8102.813, 2.2 2.2.8279.16125, and 2.3 2.3.9074.18820 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx...