FreeBSD : Dokuwiki -- XSS vulnerability (2fe4b57f-d110-11e1-ac76-10bf48230856)

Secunia Research reports : Secunia Research has discovered a vulnerability in DokuWiki, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the 'ns' POST parameter in lib/exe/ajax.php when 'call' is set to 'medialist' and 'do' is set to 'media' is n...

CVE-2012-0283

Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...

CVE-2012-0283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the tplmediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php...

5uCMS 1.2.2024 admin/ajax.php SQL注入漏洞

No description provided by source...

XSS in PrestaShop

High-Tech Bridge SA Security Research Lab has discovered vulnerability in PrestaShop, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in PrestaShop Input passed via the "product" POST parameter to ajax.php is not properly sanitised before being...

CVE-2012-1936: Cross-Site Request Forgery (CSRF)

The wpcreatenonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery CSRF attacks on specific actions and objects by sniffing t...

phpFox <= 3.0.1 (ajax.php) Remote Command Execution Exploit

Exploit for php platform in category web applications ?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX...

PHPFox 3.0.1 - ajax.php Remote Command Execution

PHPFox 3.0.1 - ajax.php Remote Command Execution ?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX mail...............:...

PHPFox 3.0.1 - 'ajax.php' Remote Command Execution

?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX mail...............: n0b0d13satgmaildotcom software link......:...

Chyrp 2.1.1 - ajax.php HTML Injection

Chyrp 2.1.1 - ajax.php HTML Injection source: https://www.securityfocus.com/bid/52115/info Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser,...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

Sql injection

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

CVE-2012-0069

CVE-2012-0069 describes an SQL injection in Batavi’s web component. Affected: Batavi before 1.2.1, via ajax.php and the boxToReload parameter, enabling remote command execution. Exploit details are not provided in the supplied documents. Impact and remediation: the vulnerability allows arbitrary ...

CVE-2012-0069: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

CVE-2011-4803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-4803

Affected software: WordPress WPtouch plugin. Vulnerable component: wptouch/ajax.php; issue: SQL injection via the id parameter that allows remote execution of arbitrary SQL commands. Root cause: improper validation/escaping in the Ajax endpoint. Impact: potential data modification, query manipula...

WordPress WP Glossary Plugin SQL Injection

No description provided by source. Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary,...

WordPress Plugin Glossary - SQL Injection

WordPress Plugin Glossary - SQL Injection Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary,...

WordPress WP Glossary SQL Injection

Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary, Wordpress Plugin, vulnerability is SQL...