iBrowser Plugin 1.4.1 Cross Site Scripting

iBrowser Plugin v1.4.1 dir Remote Cross-Site Scripting Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: alert'zsl' http://SOMECMS/jscripts/tinymce/plugins/ibrowser/scripts/phpThumb/demo/phpThumb.demo.random.php?dir=alert'zsl'...

iBrowser Plugin v1.4.1 (dir) Remote Cross-Site Scripting Vulnerability

Summary iBrowser is an image browser plugin for WYSIWYG editors like tinyMCE, SPAW, htmlAREA, Xinha and FCKeditor developed by net4visions. It allows image browsing, resizing on upload, directory management and more with the integration of the phpThumb image library. Description iBrowser suffers...

iBrowser Plugin v1.4.1 (lang) Local File Inclusion Vulnerability

Exploit for php platform in category web applications iBrowser Plugin v1.4.1 lang Local File Inclusion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: lang.'.php' ; 70: $this - charset = $langcharset; 71: $this - dir = $langdirection; 72: $this...

iBrowser Plugin 1.4.1 Local File Inclusion

iBrowser Plugin v1.4.1 lang Local File Inclusion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: lang.'.php' ; 70: $this - charset = $langcharset; 71: $this - dir = $langdirection; 72: $this - langdata = $langdata; 73: unset $langdata ; 74:...

FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions

FireCAT 2.0 Released - Firefox Catalog of Auditing Extensions FireCAT Firefox Catalog of Auditing exTensions is a mindmap collection of the most efficient and useful Firefox extensions oriented application security auditing and assessment. FireCAT is not a replacement of other security utilities...

European Space Agency (ESA.INT) Hacked by TinKode !

European Space Agency ESA.INT Hacked by TinKode ! The European Space Agency ESA, established in 1975, is an intergovernmental organisation dedicated to the exploration of space, currently with 18 member states. Headquartered in Paris, ESA has a staff of more than 2,000 with an annual budget of...

JVN#07497935: Multiple Yokka provided products may insecurely load executable files

Multiple products provided by Yokka such as text editors, contain an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privilege of running the application. Solution Update the Software Update to the latest version...

CVE-2010-1357: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in editors/logindialogue.php in SBD Directory Software 4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2010-1189: Improper Input Validation

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

Threatpost News Wrap #4: Crypto libraries, cybersecurity czar job

Threatpost editors Ryan Naraine and Dennis Fisher talk about the problems with developers implementing their own crypto libraries in Web applications, the short list of names for the cybersecurity czar job and the possibility of a full-scale hacker bracket competition. Download SHOW NOTES: Short...

Code injection

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows editors to delete pages that were created by a different author via unknown vectors...

Sun Solaris 910 Text Editors - Command Execution

Sun Solaris 910 Text Editors - Command Execution source: https://www.securityfocus.com/bid/31229/info Sun Solaris text editors are prone to a command-execution vulnerability. An attacker may leverage this issue to execute arbitrary commands with the privileges of another user on the affected...

Sun Solaris 9/10 Text Editors - Command Execution

source: https://www.securityfocus.com/bid/31229/info Sun Solaris text editors are prone to a command-execution vulnerability. An attacker may leverage this issue to execute arbitrary commands with the privileges of another user on the affected computer. Sun Solaris 8, 9, and 10 are affected. $ ec...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

CVE-2008-3860

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

CVE-2008-3860: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...

CVE-2008-2163

Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...

CVE-2008-2163

IBM Lotus Quickr 8.1 is affected by CVE-2008-2163: an XSS vulnerability in the WYSIWYG editors that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The issue affects Quickr 8.1 before Hotfix 5 on Windows and AIX, and before Hotfix 3 on i5/OS. Remediation is to ...

CVE-2008-2163

Cross-site scripting XSS vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."...