314 matches found
Dotclear Directory Traversal Vulnerability
Dotclear is a software developer Olivier Meunier developed a free PHP and MySQL-based blog Blog publishing software. A directory traversal vulnerability exists in the media.php script in Dotclear version v2.9.1. An attacker can exploit this vulnerability by sending a request with the directory...
Dotclear Arbitrary File Upload Vulnerability
Dotclear is a free PHP and MySQL based blog publishing software. An arbitrary file upload vulnerability exists in Dotclear version 2.9.1, which could be exploited by an attacker to execute arbitrary code or elevate privileges within the context of an affected program...
Dotclear Security Bypass Vulnerability
Dotclear is a free PHP and MySQL based blog publishing software. A security bypass vulnerability exists in Dotclear version 2.9.1, which allows attackers to bypass certain security restrictions and perform unauthorized operations...
Dotclear 2.9.1 Shell Upload
Dotclear 2.9.1 Malicious File Upload Restriction Bypass + Software: https://dotclear.org/ + Author: Wiswat Aswamenakul + Affected version: only tested on 2.9.1 previous version might be affected + Platform: tested on Ubuntu 14.04, PHP 5.5.9 + Description Dotclear has a feature to upload files in...
Dotclear 2.9.1 Directory Download
Dotclear 2.9.1 Directory Download Vulnerability + Software: https://dotclear.org/ + Author: Wiswat Aswamenakul + Affected version: only tested on 2.9.1 previous version might be affected + Platform: tested on Ubuntu 14.04, PHP 5.5.9 + Description Authenticated users with media manager access...
Multiple Cross-Site Scripting Vulnerabilities in Dotclear
Dotclear is a PHP and MySQL based Blog system . Dotclear has multiple cross-site scripting vulnerabilities that can be exploited by attackers to execute arbitrary script code in a user's browser...
dotclear 2.8.1 Cross Site Scripting
Security Advisory - Curesec Research Team 1. Introduction Affected Product: dotclear 2.8.1 Fixed in: 2.8.2 Fixed Version Link: http://download.dotclear.org/latest.zip Vendor Website: http://dotclear.org/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to...
dotclear 2.8.1 Shell Upload
Security Advisory - Curesec Research Team 1. Introduction Affected Product: dotclear 2.8.1 Fixed in: 2.8.2 Fixed Version Link: http://download.dotclear.org/latest.zip Vendor Website: http://dotclear.org/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 10/02/2015...
Dotclear cross-site scripting vulnerability (CNVD-2015-06480)
Dotclear is a software developer Olivier Meunier developed a free PHP and MySQL-based blog Blog publishing software. A cross-site scripting vulnerability exists in Dotclear 2.8.0 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2015-5651
Cross-site scripting XSS vulnerability in Dotclear before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5651
Cross-site scripting XSS vulnerability in Dotclear before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
UBUNTU-CVE-2015-5651
Cross-site scripting XSS vulnerability in Dotclear before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Dotclear before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5651
CVE-2015-5651 is a Dotclear Cross-site scripting (XSS) vulnerability affecting versions 2.8.0 and earlier. The issue permits remote attackers to inject arbitrary web script or HTML via unspecified vectors when a user views a crafted page while logged in. The published fix is to update to Dotclear...
CVE-2015-5651
Cross-site scripting XSS vulnerability in Dotclear before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Dotclear vulnerable to cross-site scripting
Overview Dotclear is a weblog software. Dotclear contains a cross-site scripting vulnerability. Yuji Tounai of NTT Com SecurityJapanKK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user views a...
JVN#65668004: Dotclear vulnerable to cross-site scripting
Dotclear is a weblog software. Dotclear contains a cross-site scripting vulnerability. Impact If a user views a specially crafted page while logged in, an arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...
CVE-2014-5316
Cross-site scripting XSS vulnerability in Dotclear before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted page...