CVE-2012-1646

The CVE-2012-1646 vulnerability affects the Drupal FAQ module (6.x-1.x prior to 6.x-1.13 and 7.x-1.x-rc1). The root cause is lack of input sanitization in the module when displaying user-supplied content, allowing XSS via the title parameter in faq.admin.inc and the detailed_question parameter in...

Slackware Advisory SSA:2006-166-01 sendmail

The remote host is missing an update as announced via advisory SSA:2006-166-01. OpenVAS Vulnerability Test $Id: esoftslkssa200616601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Debian: Security Advisory (DSA-2535-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2535-1 : rtfm - XSS

It was discovered that rtfm, the Request Tracker FAQ Manager, contains multiple cross-site scripting vulnerabilities in the topic administration page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 2535-1] rtfm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2535-1 [email protected] http://www.debian.org/security/ Florian Weimer August 29, 2012 http://www.debian.org/security/faq -...

DSA-2535-1 rtfm - cross-site scripting

Bulletin has no description...

WordPress Website FAQ Plugin v1.0 SQL Injection

No description provided by source. Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip Version: 1.0...

WordPress Website FAQ Plugin 1.0 - SQL Injection

This WordPress Website FAQ plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Website FAQ 1.0 - SQL Injection

WordPress Plugin Website FAQ 1.0 - SQL Injection Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip Version...

WordPress Website FAQ Plugin v1.0 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip...

WordPress Website FAQ 1.0 SQL Injection

Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip Version: 1.0...

WordPress Plugin Website FAQ 1.0 - SQL Injection

Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip Version: 1.0...

MS12-034: Description of the security update for DirectWrite in Windows: May 8, 2012

None None...

Softbiz PHP FAQ CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Softbiz PHP FAQ CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/softbiz-simple-faq-script/32330/ Category:: webapps Demo : http://www.softbizscripts.com/scripts/faq/admin Greetz: Inj3ct0r Exploi...

FAQ module for phpFaber CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: FAQ module for phpFaber CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/faq-module-for-phpfaber-cms/19826/ Category:: webapps Demo : http://demo.phpfaber.com/cms1/cmsadmin Greetz: Inj3ct0r Explo...

Softbiz SEO FAQ CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Softbiz SEO FAQ CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/softbiz-seo-faq-software/32336/ Category:: webapps Demo : http://demos1.softbiz.com/scripts/seofaq/admin/ Greetz: Inj3ct0r Exploit...

NICE PHP FAQ Script CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: NICE PHP FAQ Script CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/nice-php-faq-script-designer-seo/24292/ Category:: webapps Demo : http://www.nicephpscripts.com/scripts/faqscript/admin Greetz...

SA-CONTRIB-2012-023 - FAQ - Cross Site Scripting

CVE: CVE-2012-1646 The Frequently Asked Questions faq module allows users, with the appropriate permissions, to create question and answer pairs which are displayed on the 'faq' page, and in the random and recent FAQ blocks. The module does not sanitize some of the user-supplied data before...

CVE-2011-5079

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...

CVE-2011-5079

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...