CVE-2009-4083

CVE-2009-4083 describes multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier. The XSS is via unspecified vectors affecting numerous admin/file paths (submitnews.php, usersettings.php, newpost.php, banlist.php, banner.php, cpage.php, download.php, users_extended.php, fron...

[Bkis-13-2009] e107 Multiple Vulnerabilities

Bkis-13-2009 e107 Multiple Vulnerabilities 1. General Information e107 is a free content management system CMS written in PHP language and is available at http://e107.org/news.php . In October 2009, Bkis Security discovered a number of XSS and Blind SQL Injection vulnerabilities on this system...

e107多个跨站脚本和SQL注入漏洞

BUGTRAQ ID: 37087 e107是用php编写的内容管理系统。 e107的以下模块没有充分的过滤用户所提交的变量： - submitnews.php - usersettings.php. - e107admin/newpost.php. - e107admin/banlist.php. - e107admin/banner.php. - e107admin/cpage.php - e107admin/download.php. - e107admin/usersextended.php. - e107admin/frontpage.php. -...

e107 'Referer' Header Cross-Site Scripting Vulnerability

e107 is prone to remote Cross-Site Scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107";...

Cross-Site Scripting vulnerability in eCaptcha

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in eCaptcha plugin for E107. I found this hole in July 2008 and disclosed it at 25.09.2008. XSS: POST query at page http://site/path/ecaptcha/?key=b7c9bf99e763252105f047a5ca5681d0 scriptalertdocument.cookie/script in field...

E107 eCaptcha Cross Site Scripting

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in eCaptcha plugin for E107. I found this hole in July 2008 and disclosed it at 25.09.2008. XSS: POST query at page http://site/path/ecaptcha/?key=b7c9bf99e763252105f047a5ca5681d0 alertdocument.cookie in field: Type Here...

CVE-2009-3444

Cross-site scripting XSS vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 aka news to email action...

Cross site scripting

Cross-site scripting XSS vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 aka news to email action...

CVE-2009-3444

The CVE-2009-3444 entry concerns the e107 web platform (versions 0.7.16 and earlier) with a Cross-Site Scripting (XSS) vulnerability in email.php triggered via the HTTP Referer header in the news.1 (news to email) action. Affected component: e107 (email.php within news-to-email flow). Root cause:...

CVE-2009-3444

Cross-site scripting XSS vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 aka news to email action...

e107 eCaptcha plugin 2.1 xss

Exploit for unknown platform in category web applications ============================ e107 eCaptcha plugin 2.1 xss ============================ XSS: POST query at page http://site/path/ecaptcha/?key=b7c9bf99e763252105f047a5ca5681d0 alertdocument.cookie in field: Type Here. Working key ecaptchake...

e107 eCaptcha plugin 2.1 xss

No description provided by source. Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in eCaptcha plugin for E107. I found this hole in July 2008 and disclosed it at 25.09.2008. XSS: POST query at page http://site/path/ecaptcha/?key=b7c9bf99e763252105f047a5ca5681d0...

e107 Referer头跨站脚本漏洞

BUGTRAQ ID: 36517 e107是用php编写的内容管理系统。 e107中用于向邮件发送新闻的页面（http://site/email.php?news.1 ）没有正确地过滤Referer头，远程攻击者可以通过向该页面提交恶意的HTTP请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 e107.org e107 website system 0.7.16 厂商补丁： e107.org -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://e107.org/ Referer:...

e107 0.7.x - CAPTCHA Security Bypass Cross-Site Scripting

e107 0.7.x - CAPTCHA Security Bypass Cross-Site Scripting source: https://www.securityfocus.com/bid/36532/info e107 is prone to a security-bypass vulnerability and multiple cross-site scripting vulnerabilities. Successfully exploiting the security-bypass issue will allow an attacker to bypass the...

e107 0.7.x - CAPTCHA Security Bypass / Cross-Site Scripting

source: https://www.securityfocus.com/bid/36532/info e107 is prone to a security-bypass vulnerability and multiple cross-site scripting vulnerabilities. Successfully exploiting the security-bypass issue will allow an attacker to bypass the 'CAPTCHA' security mechanism. This may lead to other...

E107 Referer Cross Site Scripting

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in E107. Which I found at 31.01.2009 and disclosed recently. XSS: At page for sending news to email http://site/email.php?news.1 it's possible to conduct XSS attack via Referer header. Particularly it can be done via flash...

e107 0.7.16 - Referer header Cross-Site Scripting

e107 0.7.16 - Referer header Cross-Site Scripting Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in E107. Which I found at 31.01.2009 and disclosed recently. XSS: At page for sending news to email http://site/email.php?news.1 it's possible to conduct XSS attack via...

e107 0.7.16 Referer header xss

Exploit for unknown platform in category web applications ============================== e107 0.7.16 Referer header xss ============================== XSS: At page for sending news to email http://site/email.php?news.1 it's possible to conduct XSS attack via Referer header. Particularly it can be...

e107 0.7.16 Referer header xss

No description provided by source. Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in E107. Which I found at 31.01.2009 and disclosed recently. XSS: At page for sending news to email http://site/email.php?news.1 it's possible to conduct XSS attack via Referer header...

Cross-Site Scripting vulnerability in E107

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in E107. XSS: At page for sending news to email http://site/email.php?news.1 it's possible to conduct XSS attack via Referer header. Particularly it can be done via flash. Referer: 'scriptalertdocument.cookie/script...