37 matches found
CVE-2022-28117
A Server-Side Request Forgery SSRF in feedparser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter...
PT-2022-18822 · Unknown · Navigate Cms
Name of the Vulnerable Software and Affected Versions: Navigate CMS version 2.9.4 Description: A Server-Side Request Forgery SSRF in the feed parser class allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter...
CVE-2022-28117: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF in feedparser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter...
CVE-2021-25068
The Sync WooCommerce Product feed to Google Shopping WordPress plugin through 1.2.4 uses the 'feedid' POST parameter which is not properly sanitized for use in a SQL statement, leading to a SQL injection vulnerability in the admin dashboard...
Cross site scripting
Cross-site scripting XSS vulnerability in vwrooms/js/jsor-jcarousel/examples/specialtextscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers to inject arbitrary web script or HTML via a URL to a crafted SVG file in the feed parameter...
CVE-2007-2285: Undefined Security Weakness
Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 Ext JS allows remote attackers to read arbitrary files via a .. dot dot in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent...
CVE-2006-1957
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
Design/Logic Flaw
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
Design/Logic Flaw
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
CVE-2006-1957
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
CVE-2006-1956
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
CVE-2006-1956: Undefined Security Weakness
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
PT-2006-2941 · Joomla +1 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: Mambo affected versions not specified Joomla! affected versions not specified Description: The issue allows remote attackers to cause a denial of service, potentially leading to disk consumption and web-server outage, by making multiple...
PT-2006-2940 · Joomla +1 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: Mambo affected versions not specified Joomla! affected versions not specified Description: The issue allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message. This is...
CVE-2006-1027
feedcreator.class.php aka the syndication component in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a "/" slash in the feed parameter to index.php, which reveals the path in an error message...
CVE-2006-1028: Undefined Security Weakness
feedcreator.class.php aka the syndication component in Joomla! 1.0.7 allows remote attackers to cause a denial of service stressed file cache by creating many files via filenames in the feed parameter to index.php...
CVE-2005-2110
WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via 1 a direct request to menu-header.php or a "1" value in the feed parameter to 2 wp-atom.php, 3 wp-rss.php, or 4 wp-rss2.php, which reveal the path in an error message. NOTE: vector 1 was later reported to al...