4304 matches found
SA-2008-042 - Tinytax - Cross site scripting
The Tinytax taxonomy block displays a vocabulary as a tree within a block. The module displays certain values without appropriate filtering. Malicious users with the permission to create taxonomy terms are able to exploit this issue and insert arbitrary HTML and script code into pages. Such a cro...
SA-2008-041 - Taxonomy autotagger - Multiple vulnerabilities
The Taxonomy Autotagger will automatically tag a post with terms from a vocabulary if the terms are found in the content of the post. The module does not properly use Drupal's database API and inserts values supplied by users directly into queries. This can be exploited by malicious users with th...
SA-2008-039 - Suggested terms - Cross site scripting
This module provides "suggested terms" for free-tagging Taxonomy fields based on terms already submitted. Taxonomy terms as presented in the clickable list are not properly sanitized. Users who are able to create new terms are able to insert arbitrary script code and HTML into certain edit pages...
Hiki cross-site scripting vulnerability
Overview Hiki, a Wiki clone from the Hiki development team, contains a cross-site scripting vulnerability. Impact A remote attacker could create a content containing attacking code and take over a session by stealing the session ID of the user who logged into the system. If the user logged into t...
Directory traversal
Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the module parameter...
SA-2008-019 - Refine by Taxonomy - Cross site scripting
Refine by Taxonomy is a module that provides a taxonomy browsing user interface. Taxonomy terms are not escaped before display, making it possible to inject arbitrary HTML and script code into pages which contain the Refine by Taxonomy feature. This may lead to administrator access if certain...
SA-2008-10 - Archive - Cross site scripting
The Archive module provides a replacement for the archive functionality that was present in Drupal 4.7. Certain URL arguments are not escaped before display. It is therefore possible to inject arbitrary HTML and script code into certain archive pages, which may lead to administrator access if...
hc-multi.txt
Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...
Hosting Controller 6.1 Hot fix <= 3.3 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== Hosting Controller 6.1 Hot fix = 3.3 Multiple Remote Vulnerabilities ===================================================================== Title: Multiple Security Bugs ...
Wordpress Cookie Authentication Vulnerability
Wordpress Cookie Authentication Vulnerability Original release date: 2007-11-19 Last revised: 2007-11-19 Latest version: http://www.cl.cam.ac.uk/users/sjm217/advisories/wordpress-cookie-auth.txt CVE ID: pending Source: Steven J. Murdoch http://www.cl.cam.ac.uk/users/sjm217/ Systems Affected:...
To the anonymous Phpbb visitor administrator permissions-bug warning-the black bar safety net
Visit a phpbb site, close firefox, double-click the exe, and then browse the site, already has administrator privileges. - the problem also things out in a cookie on | / Paisterist's code was nice but heres mil's version. precompiled: http://www.milw0rm.com/sploits/897.rar Usage: bcc32 897.cpp an...
Adobe Connect企业服务器信息泄露漏洞
BUGTRAQ ID: 25640 CVECAN ID: CVE-2007-4651 Adobe Connect之前名为Macromedia Breeze，是企业级的网络通讯解决方案。 Adobe Connect企业服务器没有正确的验证某些输入，可能允许用户访问某些只有管理员才可以访问页面，导致信息泄露。 Adobe Connect 6 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://download.macromedia.com/pub/connect/updaters/patchto602r389a2.zip...
CVE-2007-4651
CVE-2007-4651 affects Adobe Connect Enterprise Server 6. The connected sources indicate an input validation issue that allows non‑admin users to access pages intended for administrators, causing an information disclosure vulnerability (restricted pages readable by non‑admins). Details in the Seeb...
Adonis privilege escalation
By using shell characters problem administrator can access device with root privileges...
IBM Lotus Notes information leak
Administrator can enable debugging function to log all user's passwords...
Vista inherits the recovery center system vulnerability to bypass all security protective measures-vulnerability warning-the black bar safety net
Everyone knows a very distant Windows design vulnerability: the System Restore Control Center. Through this platform, you can get administrator access, any view hard disk for any file. The most critical is that it actually does not require you to provide any username or password can be used. To u...
Image pager - Cross site scripting
The Image Pager module uses JavaScript to collect selected images from a page and display them one at a time in a block with previous/next pager links. HTML entities are decoded by the DOM functions used by Image Pager before being reinserted into the web page for display. As a result, a maliciou...
Then the storm BBSxp 7.0 Beta 2 vulnerability-vulnerability warning-the black bar safety net
The vulnerability exists in the file setup. asp The first part of the Registration－login-post-edit-capture-package-promoted to administrator-change background-password - login backend-WEBSHELL Here I set the password as: ttfct1 ,NC submitted successfully provided for the administrator. With...
[SA23895] Drupal Acidfree Module "node titles" SQL Injection Vulnerability
TITLE: Drupal Acidfree Module "node titles" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA23895 VERIFY ADVISORY: http://secunia.com/advisories/23895/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Drupal Acidfree Module 4.x http://secunia.com/product/13326/...
[Full-disclosure] [DRUPAL-SA-2007-001] Drupal 4.6.11 / 4.7.5 fixes XSS issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2007-001 ---------------------------------------------------------------------------- Project: Drupal core. Date: 2007-Jan-05. Security risk: Less critical. Exploitable from: Remote...