CVE-2010-1601

CVE-2010-1601 refers to a directory traversal (local file inclusion) in the Joomla! JA Comment (com_jacomment) component. The vulnerability exists when an attacker supplies a …/ (dot dot) sequence in the view parameter to index.php, enabling reading of arbitrary files on the affected server. The ...

CVE-2010-1601: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JA Comment comjacomment component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php...

CVE-2010-1602: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Advanced Poll Script SQL Injection / Cross Site Scripting

Exploit Title: XSS and Authentication bypass in Advanced Poll Script Date: 26-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with...

Cross site scripting

Cross-site scripting XSS vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field...

CVE-2010-1539

Cross-site scripting XSS vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field...

CVE-2010-1539

Cross-site scripting XSS vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field...

CVE-2010-1539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Workflow module 5.x-2.x before 5.x-2.6 and 6.x-1.x before 6.x-1.4 for Drupal, when used with the Token module, might allow remote authenticated users to inject arbitrary web script or HTML via a certain Comment field...

wb news (webmobo) 2.3.3 - Persistent Cross-Site Scripting

wb news webmobo 2.3.3 - Persistent Cross-Site Scripting Title: WB News Webmobo 2.3.3 Stored XSS Vendor: http://www.webmobo.org/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

Joomla ZiMB Comment 0.8.1 Local File Inclusion

================================================================================================================= o Joomla Component ZiMB Comment Local File Inclusion Vulnerability Software : comzimbcomment version 0.8.1 Vendor : http://www.zimbllc.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion

================================================================================================================= o Joomla Component ZiMB Comment Local File Inclusion Vulnerability Software : comzimbcomment version 0.8.1 Vendor : http://www.zimbllc.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion ================================================================================================================= o Joomla Component ZiMB Comment Local File Inclusion Vulnerability Software : comzimbcomment version 0.8.1 Vendor :...

Joomla JA Comment Local File Inclusion

========================================================================================================= o Joomla Component JA Comment Local File Inclusion Vulnerability Software : comjacomment Vendor : http://www.joomlart.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY Paman zxvf s4va Contact :...

Joomla! Component JA Comment - Local File Inclusion

Joomla! Component JA Comment - Local File Inclusion ========================================================================================================= o Joomla Component JA Comment Local File Inclusion Vulnerability Software : comjacomment Vendor : http://www.joomlart.com/ Author :...

Joomla! Component JA Comment - Local File Inclusion

========================================================================================================= o Joomla Component JA Comment Local File Inclusion Vulnerability Software : comjacomment Vendor : http://www.joomlart.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY Paman zxvf s4va Contact :...

Cross site scripting

Cross-site scripting XSS vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter aka the Comment Box in a noentryid action. NOTE: some of these details are obtained from third party information...

CVE-2010-1048

Cross-site scripting XSS vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter aka the Comment Box in a noentryid action. NOTE: some of these details are obtained from third party information...

CSICE Cross Site Request Forgery / Cross Site Scripting

http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the Post comment filelds in the following page move to this page 'only for authenticated user' http://www.csice.org/student/subjects.html and choose a subject and...

CSICE XSS and CSRF Vulnerability

Exploit for unknown platform in category web applications ================================ CSICE XSS and CSRF Vulnerability ================================ http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the...

Cross site scripting

Cross-site scripting XSS vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the reports comment box in a continueassess action. NOTE: some of these details are obtained from third party information...