DRUPAL-SA-2006-024 - Drupal core - Multiple cross site scripting vulnerabilities

Multiple XSS cross site scripting vulnerabilities have been discovered. A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS...

drupal -- multiple XSS vulnerabilities

The Drupal Team reports: A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS attack via a specially crafted RSS feed. This...

gregariusXSSSQL.txt

http://gregarius.net/ Gregarius is a web-based RSS/RDF/ATOM feed aggregator, designed to run on your web server, allowing you to access your news sources from wherever you want. XSS in search.php: search.php?rssquery=alert1&rssquerymatch=exact XSS in tags.php: tags.php?tag=alert1 SQL Injection in...

Gregarius 0.5.2 XSS and SQL Injection Vulnerabilities

http://gregarius.net/ Gregarius is a web-based RSS/RDF/ATOM feed aggregator, designed to run on your web server, allowing you to access your news sources from wherever you want. XSS in search.php: search.php?rssquery=scriptalert1/script&rssquerymatch=exact XSS in tags.php:...

CVE-2004-2623

Unknown vulnerability in Rippy the Aggregator before 0.10, when registerglobals is enabled, has unknown attack vectors and impact, possibly related to the "user-controlled filter."...

CVE-2004-2623

Technical details about CVE-2004-2623 are not publicly available in the provided documents. No concrete affected product/version, root cause, or remediation is described. Monitor for updates from official sources.

CVE-2004-2623

Unknown vulnerability in Rippy the Aggregator before 0.10, when registerglobals is enabled, has unknown attack vectors and impact, possibly related to the "user-controlled filter."...