IBM Sterling Connect:Enterprise跨站脚本漏洞

CVE ID:CVE-2013-6327 IBM Sterling Connect是一款点到点文件传输软件，可实现企业内和企业间的大容量、安全可靠的文件交付。 IBM Sterling Connect:Enterprise存在一个未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 IBM Sterling Connect:Enterprise 1.3.0.2 IBM Sterling Connect:Enterprise 1.4.0.0. 厂商补丁： IBM ----- IBM Sterling Connect...

Django Vulnerability Could Allow Attackers Access to Cookies

A security vulnerability in the web framework Django could make it easier for an attacker to steal a user’s cookie and log into their website even after they’ve logged out. The session invalidation vulnerability was discovered by G.S. McNamara, the same researcher who dug up a similar vulnerabili...

Joomla! Jomres组件'property_name'参数HTML注入漏洞

Bugtraq ID:61634 CVE ID:CVE-2013-3931 Joomla!是一套在国外相当知名的内容管理系统 当编辑属性细节时，通过"propertyname" POST参数传递的输入在用使用之前缺少过滤，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话 0 Jomres 7.3.0 component for Joomla! 厂商解决方案 Jomres 7.3.1 component for Joomla!已经修复此漏洞，建议用户下载更新： http://www.jomres.net/...

DiscuzNT(3.5-3.9)未明跨站脚本漏洞

DiscuzNT是一款国内流行的论坛程序 DiscuzNT 3.5多处存在反射型跨站脚本漏洞最新版3.9仍存在，允许攻击者构建恶意WEB页，诱使用户解析，可获得敏感信息或劫持用户会话 0 DiscuzNT 3.5 - 3.9 厂商解决方案 目前没有详细解决方案提供 http://nt.discuz.net/...

PHP vulnerabilities of the session session hijacking-vulnerability warning-the black bar safety net

This article mainly introduced for the PHP website, Session hijacking. session hijacking is a more complex attack methods. Most of the Internet on the computer more there is to attack danger. This is a hijacking of the tcp Protocol, so almost all of the LAN, there is the hijacking possible. The...

phpMyAdmin 3.5. x HTML injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability version: phpMyAdmin 3.5. x Vulnerability description: Bugtraq ID:5 5 9 2 5 CVE ID:CVE-2 0 1 2-5 3 3 9 phpMyAdmin is a PHP-based MySQL management program. phpMyAdmin Trigger, Procedure and Event pages not correctly escape HTML output, use the special name creating/modifying a trigger...

FreeBSD : jenkins -- multiple vulnerabilities (d846af5b-00f4-11e2-b6d0-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces security vulnerabilities that were found in Jenkins core and several plugins. - The first vulnerability in Jenkins core allows unprivileged users to insert data into Jenkins master, which can lead to remote code execution. For this...

Drupal Exposed Filter Data 模块跨站脚本漏洞

Bugtraq ID:55423 Drupal是一款开源CMS，可以作为各种网站的内容管理平台。 Drupal Exposed Filter Data模块存在跨站脚本漏洞，允许攻击者通过未明参数注入任意WEB脚本或HTML，可导致敏感信息泄露或劫持用户会话。 0 Drupal Exposed Filter Data Module 6.x-1.x 厂商解决方案 Drupal Exposed Filter Data Module 6.x-1.2已经修复此漏洞，建议用户下载使用： http://drupal.org/node/1774636...

p5-RT-Authen-ExternalAuth -- privilege escalation

The RT development team reports: RT::Authen::ExternalAuth 0.10 and below for all versions of RT are vulnerable to an escalation of privilege attack where the URL of a RSS feed of the user can be used to acquire a fully logged-in session as that user. CVE-2012-2770 has been assigned to this...

CVE-2012-1174

The rmrfchildren function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."...

CVE-2012-1174

The CVE-2012-1174 entry concerns systemd's systemd-logind rm_rf_children() in util.c, which during user logout can allow local users to delete arbitrary files via a symlink race against unspecified files. A TOCTOU race condition in the logout cleanup process is the root cause. The vulnerability a...

CVE-2012-1174

The rmrfchildren function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."...

phpList 2.10.18 Cross Site Scripting

HTTPCS Advisory : HTTPCS25 Product : phpList Version : 2.10.18 Date : 2012-07-09 Criticality level : Less Critical Description : A vulnerability has been discovered in phpList, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'footer'...

CVE-2012-1936

The wpcreatenonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery CSRF attacks on specific actions and objects by sniffing t...

Multiple vulnerabilities in ZENphoto

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ZENphoto, which can be exploited to perform arbitrary PHP code execution, sql injection and cross site scripting attacks. 1 Arbitrary PHP Code Execution in ZENphoto: CVE-2012-0993 Input passed via...

Design/Logic Flaw

EMC RSA Key Manager RKM Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation...

Joomla! 1.7.0 Cross Site Scripting

Joomla! 1.7.0 | Multiple Cross Site Scripting XSS Vulnerabilities 1. OVERVIEW Joomla! 1.7.0 stable version is vulnerable to multiple Cross Site Scripting issues. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets...

Simple Machines Forum Session Hijacking Vulnerability

The host is installed with Simple Machines Forum and is prone to session hijacking vulnerability. OpenVAS Vulnerability Test $Id: gbsimplemachinesforumsessionhijackingvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Simple Machines Forum Session Hijacking Vulnerability Authors: Rachana Shetty...

Digital Scribe 1.5 - register_form()' Multiple POST Cross-Site Scripting Vulnerabilities

25: 26: 27: Title:" SIZE=4 Mr., Mrs., etc 28: 29: Last Name:" 30: Password: 31: 32: Password Again: 33: 34: E-Mail: 35:...

Apache Archiva跨站脚本和HTML注入漏洞

Bugtraq ID: 48011 CVE ID：CVE-2011-1077 Apache Archiva是一款管理一个和多个远程存储的软件。 Apache Archiva存在多个存储型和反射型跨站脚本问题，在请求参数中或发送表单中提交包含恶意代码的JavaScript，诱使用户处理可导致恶意脚本在目标用户浏览器上执行，可获得敏感信息或劫持用户会话 Apache Archiva 1.3.4 Apache Archiva 1.3.3 Apache Archiva 1.3.2 Apache Archiva 1.3.1 Apache Archiva 1.3 Apache Archiva...