Vulnerability in multiple themes for Drupal

Hello list! The endless saga continue. After informing about a lot of vulnerable plugins and widgets with this swf-file, here is information about multiple vulnerable themes ;-. I want to warn you about Cross-Site Scripting vulnerability in multiple themes for Drupal. And a lot of other themes fo...

WP-Cumulus Variants Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerability in multiple plugins for different engines it's combinations of my two publications which I've made last week at my site. In plugins for RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion,...

Flash Tag Cloud And MT-Cumulus Plugin - tagcloud Cross-Site Scripting

Flash Tag Cloud And MT-Cumulus Plugin - tagcloud Cross-Site Scripting source: https://www.securityfocus.com/bid/47845/info The Flash Tag Cloud widget and the MT-Cumulus Plugin are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker...

Уязвимость в MT-Cumulus для Movable Type

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в плагине MT-Cumulus для Movable Type. Данная XSS уязвимость идентична XSS уязвимости в WP-Cumulus, т.к. приложение использует tagcloud.swf разработанный автором WP-Cumulus. Про миллионы флешек tagcloud.swf уязвимых к XSS атакам я...

Flash Tag Cloud And MT-Cumulus Plugin - 'tagcloud' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47845/info The Flash Tag Cloud widget and the MT-Cumulus Plugin are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

MT-Cumulus / MT 4 Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerability in plugin MT-Cumulus for Movable Type. ------------------------- Affected products: ------------------------- At first the developer made widget Flash Tag Cloud For MT 4, and later made full-fledged plugin MT-Cumulus for...

Уязвимость в Cumulus для Drupal

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости Cumulus для Drupal. Данная XSS уязвимость идентична XSS уязвимости в WP-Cumulus, т.к. приложение использует tagcloud.swf разработанный автором WP-Cumulus. Про миллионы флешек tagcloud.swf уязвимых к XSS атакам я упоминал в своей...

Cumulus For Drupal Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerability in Cumulus for Drupal. ------------------------- Affected products: ------------------------- Vulnerable are Cumulus 6.x-1.4 and previous versions and 5.x-1.1 and previous versions. ---------- Details: ---------- This XSS is...

Drupal Module Cumulus 5.x-1.16.x-1.4 - tagcloud Cross-Site Scripting

Drupal Module Cumulus 5.x-1.16.x-1.4 - tagcloud Cross-Site Scripting source: https://www.securityfocus.com/bid/46594/info The Cumulus module for Drupal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue t...

Drupal Module Cumulus 5.x-1.1/6.x-1.4 - 'tagcloud' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46594/info The Cumulus module for Drupal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

B-Cumulus Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerability in b-cumulus. It's widget for Blogger, which is also using at separate sites. SecurityVulns ID: 11353. ------------------------- Affected products: ------------------------- Vulnerable are all versions of b-cumulus. ---------...

B-Cumulus - tagcloud Multiple Cross-Site Scripting Vulnerabilities

B-Cumulus - tagcloud Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45911/info B-Cumulus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Уязвимость в b-cumulus

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости b-cumulus. Это виджет для Blogger, что также используется на отдельных сайтах. Данная XSS уязвимость идентична XSS уязвимости в WP-Cumulus, т.к. приложение использует модифицированную версию tagcloud.swf разработанную автором...

B-Cumulus - 'tagcloud' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45911/info B-Cumulus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Cumulus Widget For BlogEngine.NET Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerability in widget Cumulus for BlogEngine.NET. ----------------------------- Advisory: Vulnerability in widget Cumulus for BlogEngine.NET ----------------------------- URL: http://websecurity.com.ua/4184/ -----------------------------...

Vulnerability in widget Cumulus for BlogEngine.NET

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в виджете Cumulus для BlogEngine.NET. Данная XSS уязвимость идентична XSS уязвимости в WP-Cumulus и других веб приложениях, о которых я уже сообщал, т.к. приложение использует tagcloud.swf созданный автором WP-Cumulus. Про миллион...

Cross-Site Scripting vulnerability in Blogumus

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in Blogumus for Blogger It is similar to XSS vulnerability in WP-Cumulus http://websecurity.com.ua/3665/, because it's using tagcloud.swf made by author of WP-Cumulus. About millions of flash files tagcloud.swf which are...

Joomla JVClouds3D Cross Site Scripting / HTML Injection

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in JVClouds3D modjvclouds3D plugin for Joomla. Which I found at 08.01.2010. It is similar to XSS vulnerability in Joomulus for Joomla http://websecurity.com.ua/3801/. About millions of flash files tagcloud.swf which are...

Joomulus Cross Site Scripting

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in Joomulus modjoomulus plugin for Joomla. Which I found at 23.12.2009. It is similar to XSS vulnerability in WP-Cumulus http://websecurity.com.ua/3665/, because it's using tagcloud.swf made by author of WP-Cumulus. About...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...