EUVD-2007-4464

Malware in sbrugna...

Blix Gazetki Kupony - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Blix Gazetki Kupony published at the 'play' market has multiple vulnerabilities...

CVE-2007-4481

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4481

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4481

CVE-2007-4481 is a documented cross-site scripting (XSS) vulnerability affecting the Blix WordPress themes (version 0.9.1 and Blix 0.9.1 Rus). The issue arises in index.php where PATH_INFO (PHP_SELF) input can be manipulated to inject arbitrary web script or HTML. The vulnerability status is base...

WordPress Blix Theme <= 0.9.1 - XSS

Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the theme...

Vulnerability in theme Blix 0.9.1 for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в темах Blix 0.9.1 и Blix 0.9.1 Rus для WordPress. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Дополнительная информаци...

CVE-2007-4014

Cross-site scripting XSS vulnerability in a certain index.php installation script related to the 1 Blix 0.9.1, 2 Blixed 1.0, and 3 BlixKrieg Blix Krieg 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to...

Cross site scripting

Cross-site scripting XSS vulnerability in a certain index.php installation script related to the 1 Blix 0.9.1, 2 Blixed 1.0, and 3 BlixKrieg Blix Krieg 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to...

CVE-2007-4014

CVE-2007-4014 is an XSS issue in the index.php installation script associated with WordPress themes Blix 0.9.1, Blixed 1.0, and BlixKrieg 2.2, where the s parameter can inject arbitrary script/HTML. Connected records also describe a related CVE-2007-4165/XSS in the Blue Memories theme 1.5 for Wor...