CVE-2013-7454

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...

CVE-2013-7454

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...

CVE-2013-7453

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via vectors related to UI redressing...

CVE-2013-7454

The CVE-2013-7454 entry concerns the Node.js validator module before 1.1.0, where the XSS filter can be bypassed by nested forbidden strings. Affected component: validator module (Node.js). Root cause: bypass of the blacklist-based XSS filter; exploitability is remote without authentication and c...

CVE-2013-7454

Removed by vendor...

CVE-2013-7451

Removed by vendor...

CVE-2013-7453

Removed by vendor...

CVE-2013-7452

Removed by vendor...

CVE-2013-7454: Improper Neutralization of Input During Web Page Generation

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...

PT-2017-5757

Name of the Vulnerable Software and Affected Versions: validator module versions prior to 1.1.0 Description: The issue allows remote attackers to bypass the XSS filter via a nested tag. Recommendations: For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue...

CVE-2013-7451: Improper Neutralization of Input During Web Page Generation

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag...

CVE-2013-7452: Improper Neutralization of Input During Web Page Generation

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

CVE-2013-7453: Improper Neutralization of Input During Web Page Generation

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via vectors related to UI redressing...

CVE-2014-9772: Improper Neutralization of Input During Web Page Generation

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

DEBIAN-CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

UBUNTU-CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...