9834 matches found
Prototype JavaScript Framework跨站Ajax请求漏洞
Bugraq ID: 36926 CVE ID：CVE-2008-7220 Prototype JavaScript Framework是一款由Sam Stephenson开发的JavaScript开发函数库及框架。它提供了完整的Ajax框架及其它的工具。 Prototype JavaScript Framework存在一个未明错误，远程攻击者可以利用漏洞进行一个跨站ajax请求攻击，可以以受影响浏览器安全上下文执行任意代码。 Asterisk包含一个基于AJAX的演示管理接口，ajamdemo.html使用prototype.js框架，受此漏洞影响允许攻击者执行跨站AJAX请求攻击。...
Portili Personal And Team Wiki Disclosure / XSS / Execution
Abysssec Inc Public Advisory Title : Portili Personal and Team Wiki Multiple Remote Vulnerabilities Affected Version : Portili Personal and Team Wik = 1.14 Vendor Site : www.Portili.com Discovery : www.Abysssec.com Vendor Contact : 10/4/2009 Vendor Response : 11/4/2009 Vendor Response : i have...
AST-2009-009: Cross-site AJAX request vulnerability
Asterisk Project Security Advisory - AST-2009-009 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Cross-site AJAX request vulnerability |...
CVE-2009-3822
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat comajaxchat component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter to tests/ajcuser.php...
Remote file inclusion
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat comajaxchat component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter to tests/ajcuser.php...
CVE-2009-3822
CVE-2009-3822 affects Fiji Web Design Ajax Chat (com_ajaxchat) 1.0 for Joomla!, where a PHP remote file inclusion flaw allows an attacker to run arbitrary PHP code by supplying a URL in the GLOBALS[mosConfig_absolute_path] parameter to tests/ajcuser.php. The connected sources corroborate the same...
CVE-2009-3822
PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat comajaxchat component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter to tests/ajcuser.php...
Joomla Ajax Chat 1.0 Remote File Inclusion
Joomla Component comajaxchat Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=-...
Joomla Ajax Chat 1.0 remote file inclusion
No description provided by source. Joomla Component comajaxchat Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /|...
Joomla! Component Ajax Chat 1.0 - Remote File Inclusion
Joomla! Component Ajax Chat 1.0 - Remote File Inclusion Joomla Component comajaxchat Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ |...
Joomla Ajax Chat 1.0 remote file inclusion
Exploit for unknown platform in category web applications ========================================== Joomla Ajax Chat 1.0 remote file inclusion ========================================== Joomla Component comajaxchat Remote File Include vulnerability Author : kaMtiEz Homepage :...
Joomla! Component Ajax Chat 1.0 - Remote File Inclusion
Joomla Component comajaxchat Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 27, 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /| /| |/ / \ / / / / / -=-...
AfterLogic WebMail Pro 4.7.10 Cross Site Scripting
Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote from...
AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting
AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview...
AfterLogic WebMail Pro 4.7.10 xss
Exploit for unknown platform in category web applications ================================= AfterLogic WebMail Pro 4.7.10 xss ================================= Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to...
AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting
Security Advisory : Cross-Site Scripting flaw in AfterLogic WebMail Pro Description ------------- AfterLogic WebMail Pro is vulnerable to Cross-Site Scripting, allowing injection of malicious code in the context of the application. Overview ----------- Quote from...
CVE-2009-3256
CVE-2009-3256 is a cross-site scripting (XSS) vulnerability in LiveStreet 0.2, specifically in include/ajax/blogInfo.php. The issue allows an attacker to inject arbitrary web script or HTML via the URI (demonstrated by a SCRIPT element in a parameter such as “asd”). The NVD entry lists a base CVS...
Cross site scripting
Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...
