Open redirect

Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2009-4534

Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2009-4516

CVE-2009-4516 describes a cross-site scripting (XSS) vulnerability in the Drupal FAQ Ask module for 5.x and 6.x before 6.x-2.0. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is the Drupal FAQ Ask module (versions 5.x/6.x prior t...

CVE-2009-4517

The CVE-2009-4517 issue affects the Drupal module FAQ Ask (versions 5.x and 6.x prior to 6.x-2.0). It is a CSRF vulnerability that allows remote attackers to hijack the authentication of arbitrary users for requests accessing unpublished content. The vulnerability is network-exploitable with no r...

CVE-2009-4534

The CVE-2009-4534 entry describes an Open Redirect in the Drupal FAQ Ask module 5.x/6.x up to 6.x-2.0, allowing remote attackers to redirect users to arbitrary sites and facilitate phishing via unspecified vectors. Affected component: Drupal FAQ Ask module; vulnerable part: redirect handling. Roo...

SA-CONTRIB-2009-113 - FAQ - Cross Site Scripting

The Frequently Asked Questions faq module allows users, with the appropriate permissions, to create question and answer pairs which are displayed on the 'faq' page, and in the random and recent FAQ blocks. The module does not sanitize some of the user-supplied data before displaying it, leading t...

Ez Faq Maker Multiple Vulnerabilities

Exploit for unknown platform in category web applications ===================================== Ez Faq Maker Multiple Vulnerabilities ===================================== ----------------------------------------------------------------------------------------------- Application: Ez Faq Maker...

Scriptsez Ez FAQ Maker 1.0 - Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41806/info ScriptsEz Ez FAQ Maker is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the...

Ez Faq Maker 1.0 XSS / XSRF

----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Faq Maker Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Faq Maker - Multiple Vulnerabilities

----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

phpMyFAQ 2.5.4 Cross Site Scripting

Mutliple XSS in phpMyFAQ alert1 http://localhost/phpmyfaq/index.php?search=hello"alertdocument.cookie&action=search http://localhost/phpmyfaq/index.php?action=artikel&cat=1&id=1&artlang=en&highlight=you"alert1 http://localhost/phpmyfaq/index.php?action=artikel&cat=1&id=1&artlang=en"alert1...

SA-CONTRIB-2009-087 - FAQ Ask - Multiple Vulnerabilities

The FAQ Ask module enables site users to ask questions for experts to answer. The module suffers multiple vulnerabilities, including Cross Site Request Forgeries CSRF and Cross Site Scripting problems Cross Site Scripting. These vulnerabilities allow an attacker to hijack the account of a logged ...

Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Advisory ID: cisco-sa-20091014-cup Revision 1.0 For Public Release 2009 October 14 1600 UTC GMT +---------------------------------------------------------------------...

Unfixed XSS vulnerability at www.wananchi.com

Security researcher 444Team, has submitted on 10/02/2009 a cross-site-scripting XSS vulnerability affecting www.wananchi.com, which at the time of submission ranked 312433 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is...

CVE-2008-7063

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

Improper access control

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

CVE-2008-7063

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

CVE-2008-7063

The CVE refers to Ocean12 FAQ Manager Pro, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to access and download the database via a direct request to admin/o12faq.mdb, exposing data (confidentiality impact noted as partial). The ro...

Miniweb 2.0 FAQ Manager XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...