9109 matches found
[InterN0T] Google Analytics plugin for Wordpress - XSS Vulnerability
Yoast GA Plugin for WP - Cross Site Scripting Vulnerability Version Affected: 3.2.4 newest Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links, links within comments, blogroll links and downloads. It also...
WordPress Plugin Yoast Google Analytics 3.2.4 - 404 Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/37209/info Yoast Google Analytics for WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Piwik 1357 2009-08-02 - Arbitrary File Upload Code Execution
Piwik 1357 2009-08-02 - Arbitrary File Upload Code Execution Piwik Build , fclose$jfh; ? IV. PROOF OF CONCEPT ./libs/open-flash-chart/php-ofc-library/ofc...
Piwik Build 1357 2009-08-02 Remote File Upload
Piwik Build , fclose$jfh; ? IV. PROOF OF CONCEPT ./libs/open-flash-chart/php-ofc-library/ofcuploadimag...
Piwik <= 1357 2009-08-02 file upload and code execution
No description provided by source. Piwik Build = 1357 2009-08-02 ofcuploadimage.php Remote File Upload Discovery: Braeden Thomas Versions Affected: All Piwik versions utilising open-flash-chart I. DESCRIPTION Piwik is an open source web analytics software. It gives interesting reports on your...
Piwik <= 1357 2009-08-02 file upload and code execution
Exploit for unknown platform in category web applications ======================================================================== Piwik Build = 1357 2009-08-02 ofcuploadimage.php Remote File Upload ======================================================================== Piwik Build = 1357...
Google Analytics on An Internal Web Server Detection
A link to urchin.js from Google Analytics has been found on this internal web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid40668; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...
Use GOOGLE Analyzer do server limit dos-vulnerability warning-the black bar safety net
This article is purely YY, and finally did not practice success, but does not exclude other sites have similar possible. Many sites are using google's statistics. When we from a website, A link to a google statistics Site B, google will record the referer URI, and stored into the B COOKIE. If we...
Google Analytics Stored Cross Site Scripting
====================================================== ================= = Google Analytics - Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.google.com = = Affected Version: = -- http://www.google.com/analytics/ = = Public disclosure on 8th December 2008 =...
[SECURITY] Fedora 9 Update: awstats-6.8-2.fc9
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
WassUp 1.4.3 - (spy.php to_date) SQL Injection Exploit
The WassUp Real Time Analytics WordPress plugin was affected by a spy.php todate SQL Injection Exploit security vulnerability...
Logaholic Web Analytics Software
Logaholic Web Analytics Software Bug found by malibu.r Contact: [email protected] SQL Injection GET /logaholic/index.php?conf=nameofprofile&from=SQL INJECTION GET /logaholic/update.php?conf=nameofprofile&page=SQL INjection Cross Site Scripting POST variable "newconfname" in...
Authorization bypass in Urchin
Здравствуйте 3APA3A! Сообщаю вам об ещё одной уязвимости в Urchin Web Analytics. В ваших новостях http://securityvulns.ru/news/CGI/2007.09.25.html упоминается Cross-Site Scripting уязвимость в Urchin. Относительно данной уязвимости замечу, что как я уже написал автору в комментариях к его сообщен...
Google Urchin password theft madness
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is a trivially exploitable XSS vul on Google Urchin Web Analytics 5's login page. The vulnerability has been tested on versions 5.6.00r2, v5.7.01, 5.7.02 and 5.7.03 latest. Previous versions are most likely to be affected as well. I know that...
CVE-2007-3604
vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php...
CVE-2007-3604
vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php...
CVE-2007-3604: Undefined Security Weakness
vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php...
AWStats Referrer Header Arbitrary Command Execution
The remote host is running AWStats, an open source web analytics tool used for analyzing data from internet services such as web, streaming, media, mail and FTP servers. The version of AWStats installed on the remote host collects data about the web referrers and uses them without proper sanitati...
