Analytics-dashboard-widget 跨站脚本漏洞

Analytics-dashboard-widget is an analytics dashboard widget from Sterc open source. A cross-site scripting vulnerability exists in Sterc Analytics-dashboard-widget version 1.0.5 and earlier. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Cisco Firepower Management Center XML Entity Expansion (cisco-sa-fmc-xee-DFzARDcs)

The version of Cisco Firepower Management Center FMC installed on the remote host is prior to 6.6.1. It is, therefore, affected by a vulnerability in the dashboard widget that allows an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The...

CVE-2021-1267

A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...

Design/Logic Flaw

A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...

Cisco Firepower Management Center 安全漏洞

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. An XML entity extension vulnerability exists in the dashboard widge...

XML External Entity in Dashboard Widget

Problem It has been discovered that RSS widgets are susceptible to XML external entity processing. This vulnerability is reasonable, but is theoretical - it was not possible to actually reproduce the vulnerability with current PHP versions of supported and maintained system distributions. At leas...

TYPO3-CORE-SA-2020-012: XML External Entity in Dashboard Widget

More info at https://typo3.org/security/advisory/typo3-core-sa-2020-012...

CVE-2016-9126

Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in the audit trail widget of the dashboard upon login, allowing persistent XSS attacks. An authenticated user with enough privileges to create other users could exploit the vulnerability to...

Cross site scripting

Cross-site scripting XSS vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email...

CVE-2012-2583

CVE-2012-2583 involves a stored XSS in the WordPress plugin Mini Mail Dashboard Widget (version 1.42). Connected sources confirm the attack vector is crafted content in the body of an email that is rendered by the plugin, exploiting insufficient input sanitization to execute arbitrary scripts in ...

Disqus 2.7.5 Cross Site Request Forgery / Cross Site Scripting

Exploit for php platform in category web applications disqus csrf reset -- -- alert1;' / 0day.today 2018-03-09...

Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion

No description provided by source. Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

Important: Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Updated cfme packages that fix several security issues, multiple bugs, and add one enhancement are now available for Red Hat CloudForms 3.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

Wordpress Mini Mail Dashboard Widget 1.42 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to...

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May...

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...

WordPress Mini Mail Dashboard Widget Plugin 1.36 - Remote File Inclusion

This Mini Mail Dashboard Widget plugin is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. Solution Update the plugin...

WordPress Plugin Mini Mail Dashboard Widget 1.36 - Remote File Inclusion

Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion

Exploit for php platform in category web applications Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...