XSS in bookmarks plugin

The bookmarking code under the url http://localhost:8080/plugins/socialbookmarking/updatebookmark.action is vulnerable to XSS attacks using the spaceKey parameter: submitting the following code will execute javascript: spaceKey=%22%3E%3Cscript%3Ealertdocument.cookie%3C/script%3E%22%3E IMPORTANT:...

CVE-2008-4083

The CVE-2008-4083 entry documents a Cross-site Scripting (XSS) vulnerability in the Bookmarks plugin for Brim 2.0. The issue arises when an authenticated user adds an item via index.php, with the name parameter not properly sanitized, allowing arbitrary web script or HTML to be injected. Affected...

CVE-2008-4083

Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...

Brim 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Brim 2.0.0 - SQL Injection Cross-Site Scripting

Brim 2.0.0 - SQL Injection Cross-Site Scripting || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Active PHP Bookmarks 'id' SQL注入漏洞

BUGTRAQ ID: 30757 CNCAN ID：CNCAN-2008082201 Active PHP Bookmarks是一款基于PHP的WEB应用程序。 Active PHP Bookmarks不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'viewgroup.php'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Active PHP Bookmarks Active PHP Bookmarks 1.1.2 目前没有解决方案提供：...

Sql injection

SQL injection vulnerability in viewgroup.php in Active PHP Bookmarks APB 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3748

SQL injection vulnerability in viewgroup.php in Active PHP Bookmarks APB 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3748

SQL injection vulnerability in viewgroup.php in Active PHP Bookmarks APB 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3748

Active PHP Bookmarks (APB) versions 1.1.02 and 1.2.06 are affected by a SQL injection in view_group.php, exploitable via the id parameter to allow remote arbitrary SQL execution. The vulnerability is documented with a CVSSv2 base score of 7.5 (HIGH) with network attack vector, no authentication, ...

Active PHP Bookmarks 1.1.02 Remote SQL Injection Vulnerability

No description provided by source. || | | Bookmarks V 1.1.02 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script :...

bookmarks-sql.txt

|| | | Bookmarks V 1.1.02 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script : http://lbstone.com/apb/?version=1.1.02 | | DorK : Powered by Active P...

Active PHP BookMarks 1.1.02 - SQL Injection

Active PHP BookMarks 1.1.02 - SQL Injection || | | Bookmarks V 1.1.02 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script :...

Active PHP Bookmarks 1.1.02 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Active PHP Bookmarks 1.1.02 Remote SQL Injection Vulnerability ============================================================== || | | Bookmarks V 1.1.02 id Remote SQL Injection...

Active PHP BookMarks 1.1.02 - SQL Injection

|| | | Bookmarks V 1.1.02 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script : http://lbstone.com/apb/?version=1.1.02 | | DorK : Powered by Active P...

Google Notebook和Google Bookmarks未明跨站脚本漏洞

BUGTRAQ ID: 30574 CNCAN ID：CNCAN-2008080706 Google Notebook是一款无需离开浏览器窗口，就能添加来自网页上的文本、图像和链接的服务。Google Bookmarks是一款书签服务。 Google Notebook和Google Bookmarks存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 提交畸形的邀请和注释，通过google notebook中的共享选项，其他用户查看它时可泄漏COOKIE信息。 Google...

[SECURITY] Fedora 8 Update: chmsee-1.0.0-3.31.fc8

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

seamonkey security update

devhelp: 0.10-0.8.1.el4 - Rebuild against newer gecko seamonkey: 1.0.9-16.4.0.1.el46 - Added mozilla-oracle-default-prefs.js, mozilla-oracle-default-bookmarks.html, and mozilla-home-page.patch 1.0.9-16.4.el4 - Add patches for backported fixes from 1.8.1.16...

[SECURITY] Fedora 8 Update: chmsee-1.0.0-2.31.fc8

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

Booby 1.0.1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. software name: Booby version: 1.0.1 description: A Webbased Personal Information Manager PIM with support for bookmarks, calendar, contacts, notes, news and tasks. download:...