17 matches found
CVE-2011-1133
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php...
CVE-2011-1133
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php...
Cross site scripting
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
Cross site scripting
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php...
CVE-2011-1135
Removed by vendor...
CVE-2011-1135
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
CVE-2011-1133
Removed by vendor...
PT-2019-6615
Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 1.5.5 Description The issue allows remote attackers to execute arbitrary code. This is due to a Cross-Site Scripting XSS flaw in Xinha, which is included in the Serendipity package. The vulnerability can be...
PT-2019-6617
Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 1.5.5 Xinha affected versions not specified Description The issue allows remote attackers to execute arbitrary code. This is due to a Cross-Site Scripting XSS flaw in Xinha, which is included in the Serendipity...
CVE-2011-1135: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
CVE-2016-10759
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...
Directory traversal
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...
CVE-2016-10759
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...
CVE-2016-10759
CVE-2016-10759 describes a path traversal vulnerability in Precurio 2.1 via the Xinha plugin. The flaw is in ExtendedFileManager/Classes/ExtendedFileManager.php, where ExtendedFileManager can be used to rename the .htaccess file that blocks PHP uploads, enabling directory traversal and resulting ...
PT-2019-7555
Name of the Vulnerable Software and Affected Versions Precurio version 2.1 Description The issue in Precurio allows Directory Traversal, which can lead to arbitrary code execution. This is possible because the ExtendedFileManager can be used to rename the .htaccess file, thereby bypassing the...
S9Y Serendipity 1.5.4 - Arbitrary File Upload
S9Y Serendipity 1.5.4 - Arbitrary File Upload In The Name Of GOD + Exploit Title:remote 0day file upload + Date: 2010 + script:Serendipity 1.5.4 + Software Link: http://www.s9y.org/12.html + Author : pentesters.ir +discovered by:ahmadbady + Contact : [email protected] + Website :...
XINHA Editor Plugin ExtendedFileManager Cross Site Scripting
MajorSecurity SA-077XINHA Editor Plugin "ExtendedFileManager" - Cross Site Scripting Issue Details ============= Product: XINHA Editor Plugin "ExtendedFileManager" Security-Risk: low Remote-Exploit: yes Vendor-URL: http://www.xinha.org/ Advisory-Status: published Credits ============= Discovered...