Уязвимости в xAjax и xajax_jquery_plugin

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в xAjax и xajaxjqueryplugin. XSS WASC-08: http://site/cms/’;alertdocument.cookie;/ Это DOM Based XSS. Данная уязвимость в частности имеет место в MC Content Manager которая использует xAjax...

Debian Security Advisory DSA 1692-1 (php-xajax)

The remote host is missing an update to php-xajax announced via advisory DSA 1692-1. OpenVAS Vulnerability Test $Id: deb16921.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1692-1 php-xajax Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1692-1 : php-xajax - insufficient input sanitising

It was discovered that php-xajax, a library to develop Ajax applications, did not sufficiently sanitise URLs, which allows attackers to perform cross-site scripting attacks by using malicious URLs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Debian: Security Advisory (DSA-1692-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1692-1] New php-xajax packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1692-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 27, 2008 http://www.debian.org/security/faq -...

DSA-1692-1 php-xajax - cross-site scripting

Bulletin has no description...

Joomla Component JUser 1.0.14 Remote File Inclusion Vulnerability

No description provided by source. ================================================================================================================================== JUser Joomla Component 1.0.14 Remote File Include Vulnerability Component : comjuser version 1.0.14 - paid component Vendor :...

CVE-2007-2740

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS...

CVE-2007-2739

Cross-site scripting XSS vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS...

CVE-2007-2740

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS...

CVE-2007-2739

Cross-site scripting XSS vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DEBIAN-CVE-2007-2740

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS...

CVE-2007-2740

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS...

DEBIAN-CVE-2007-2739

Cross-site scripting XSS vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-2740

Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS...

CVE-2007-2740

Removed by vendor...

CVE-2007-2739

Removed by vendor...

CVE-2007-2740

Technical details for CVE-2007-2740 are not publicly provided in the supplied documents. Monitor for updates; no confirmed affected products, vectors, or fixes are stated here.