3308 matches found
CVE-2014-4848
Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...
CVE-2014-4848
The CVE-2014-4848 entry concerns the Blogstand Smart Banner WordPress plugin (version 1.0). A stored/reflected XSS vulnerability exists in the bs_blog_id parameter passed to wp-admin/options-general.php, enabling attackers to inject arbitrary script/HTML. Impact is web-page script execution by re...
CVE-2014-4848
Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...
CVE-2014-4847
CVE-2014-4847 concerns a cross-site scripting (XSS) flaw in the WordPress plugin “Random Banner” version 1.1.2.1. The vulnerability allows a remote attacker to inject arbitrary web script or HTML via the buffercode_RBanner_url_banner1 parameter in an update action to wp-admin/options.php. Affecte...
CVE-2014-4847: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Random Banner plugin 1.1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the buffercodeRBannerurlbanner1 parameter in an update action to wp-admin/options.php...
CVE-2014-4848: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...
osCommerce 2.3.4 - Multiple vulnerabilities
Latest osCommerce software suffers on multiple cross site scripting and cross site request forgery vulnerabilities, which even may lead to remote code execution. Title: osCommerce 2.3.4 - Multiple vulnerabilities Date: 10.07.14 Affected versions: = 2.3.4 latest atm Vendor: oscommerce.com Tested o...
PT-2014-6162
Name of the Vulnerable Software and Affected Versions Blogstand Banner plugin version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the bs blog id parameter to "wp-admin/options-general.php". Recommendations For Blogstand Banne...
PT-2014-6161
Name of the Vulnerable Software and Affected Versions Random Banner plugin version 1.1.2.1 for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the buffercode RBanner url banner1 parameter in an update action to...
WordPress Random Banner Plugin <= 1.1.2.1 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "buffercodeRBannerurlbanner1" parameter in an update action to wp-admin/options.php. Solution Update the plugin...
WordPress Blogstand Banner Plugin <= 1.0 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "bsblogid" parameter to wp-admin/options-general.php. Solution Update the plugin...
Lotus Domino 5.0.8-9 Non-existent NSF Database Banner Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/6128/info Lotus Domino reportedly discloses sensitive banner information when a non-existent NSF database is requested. This may allow a remote attacker to discover information about the layout of the filesystem. This iss...
OpenX banner-edit.php File Upload PHP Code Execution
No description provided by source. $Id: openxbanneredit.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
AWeb's Banner Generator 3.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17416/info AWeb's Banner Generator is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
JiRo's Banner System 2.0 Login.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
PHPNuke 5.6/6.x Banners.PHP Banner Manager Password Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7170/info It has been reported that an input validation error exists in the banners.php file included with PHPNuke. Because of this, an attacker could send a malicious string through PHPNuke that would allow the attacker ...
SSH2 3.0 Short Password Login Vulnerability
source: http://www.securityfocus.com/bid/3078/info An input validation error exists in version 3.0.0 of the SSH daemon sshd running on Unix platforms. It may be possible for remote users to log in to accounts for which there are two or less characters in the password field of the system password...
SoftBiz Banner Exchange Script 1.0 insertmember.php city Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18735/info Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to users of the application. An attacker may...
moxftp 2.2 Banner Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6921/info A buffer overflow vulnerability has been reported for moxftp. The vulnerability occurs when moxftp is parsing 'Welcome' banner messages from remote FTP servers. When moxftp receives an overly long FTP banner, it...