138 matches found
CVE-2018-17572
InfluxDB 0.9.5 has Reflected XSS in the Write Data module...
PT-2020-8618
Name of the Vulnerable Software and Affected Versions: InfluxDB version 0.9.5 Description: The issue is related to Reflected XSS in the Write Data module of InfluxDB, which can also be accessed via the admin panel. Recommendations: For InfluxDB version 0.9.5, consider disabling the Write Data...
Drupal Data SQL Injection Vulnerability
Drupal is an open source content management system developed by the Drupal community using the PHP language. A SQL injection vulnerability exists in Drupal version 6.20, Data 6.x-1.0-alpha14. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...
Drupal Data Cross-Site Scripting Vulnerability
Drupal is an open source content management system developed by the Drupal community using the PHP language. A cross-site scripting vulnerability exists in Drupal version 6.20, Data 6.x-1.0-alpha14. The vulnerability stems from a lack of proper validation of client-side data by the WEB applicatio...
PT-2020-7110
Name of the Vulnerable Software and Affected Versions Drupal versions 6.20 Data module versions 6.x-1.0-alpha14 Description The issue is caused by insufficient sanitization of table names or column names, leading to an SQL Injection vulnerability. Recommendations For Drupal version 6.20, update t...
Siemens SIPLUS SYNC-MODULE Detection
Binary data 750299.prm...
python: missing boundary check in JSON module
A flaw was found in the way the json module handled negative index argument passed to certain functions such as rawdecode. An attacker able to control index value passed to one of the affected functions could possibly use this flaw to disclose portions of the application memory...
CVE-2012-6575
CVE-2012-6575 affects the Drupal Exposed Filter Data module (6.x-1.x) prior to 6.x-1.2. It is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary scripts via unspecified vectors. Root cause: insufficient input sanitization in the module. Impact: potential execution...
CVE-2012-6575
Cross-site scripting XSS vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-1654
Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...
CVE-2012-1654
Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...
CVE-2012-1654
The CVE-2012-1654 case affects Drupal’s Data module (6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3). The vulnerability arises from insufficient escaping in the title used when creating tables, allowing remote authenticated users with the administer data tables permission to inject arbi...
CVE-2012-1654: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...
PT-2012-3418
Name of the Vulnerable Software and Affected Versions Data module versions prior to 6.x-1.0 Data module versions prior to 7.x-1.0-alpha3 Description The issue allows remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML. This is achieved via...
CVE-2011-5111
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to 1 the data module in alumni.php; or the 2 lihbuku, 3 artikel, 4 album, or 5 berita module in index.php...
Sql injection
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to 1 the data module in alumni.php; or the 2 lihbuku, 3 artikel, 4 album, or 5 berita module in index.php...
CVE-2011-5111
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to 1 the data module in alumni.php; or the 2 lihbuku, 3 artikel, 4 album, or 5 berita module in index.php...