DFF PHP Framework API (Data Feed File) RFI Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== DFF PHP Framework API Data Feed File RFI Vulnerabilities ========================================================== DFF PHP Framework API Data Feed File Multiple Inclusion...

dffphp-rfi.txt

DFF PHP Framework API Data Feed File Multiple Inclusion Vulnerabilities Script :http://opensource.datafeedfile.com/download/DFFPHPFrameworkAPI-latest.zip Exploits : /DFFPHPFrameworkAPI-latest/include/DFFaffiliateclientAPI.php?DFFconfigdirinclude=...

DFF PHP Framework API (Data Feed File) RFI Vulnerabilities

No description provided by source. DFF PHP Framework API Data Feed File Multiple Inclusion Vulnerabilities Script :http://opensource.datafeedfile.com/download/DFFPHPFrameworkAPI-latest.zip Exploits : /DFFPHPFrameworkAPI-latest/include/DFFaffiliateclientAPI.php?DFFconfigdirinclude=...

DFF PHP Framework API - 'Data Feed File' Remote File Inclusion

DFF PHP Framework API Data Feed File Multiple Inclusion Vulnerabilities Script :http://opensource.datafeedfile.com/download/DFFPHPFrameworkAPI-latest.zip Exploits : /DFFPHPFrameworkAPI-latest/include/DFFaffiliateclientAPI.php?DFFconfigdirinclude=...

Mozilla Foundation Security Advisory 2008-39

Mozilla Foundation Security Advisory 2008-39 Title: Privilege escalation using feed preview page and XSS flaw Impact: Critical Announced: September 23, 2008 Reporter: mozbugra4 Products: Firefox Fixed in: Firefox 2.0.0.17 Description Mozilla security researcher mozbugra4 reported a series of...

[SECURITY] Fedora 8 Update: liferea-1.4.15-4.fc8

Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...

[SECURITY] Fedora 9 Update: blam-1.8.5-2.fc9

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

CVE-2008-4200

Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker...

CVE-2008-4200

The provided connected documentation confirms CVE-2008-4200 affects Opera prior to 9.52, where the address field of a news feed may not reflect the feed’s actual URL. This can allow a remote attacker to set the field to display the URL of a page containing script controlled by the attacker, enabl...

CVE-2008-3836

CVE-2008-3836 affects Mozilla Firefox prior to 2.0.0.17. The vulnerability exists in feedWriter and allows remote attackers to run scripts with chrome privileges through feed preview-related vectors, specifically via functions elem.doCommand, elem.dispatchEvent, _setTitleText, _setTitleImage, and...

CVE-2008-3836

feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the 1 elem.doCommand, 2 elem.dispatchEvent, 3 setTitleText, 4 setTitleImage, and 5 initSubscriptionUI functions...

XSS in RSS feed creation

URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...

XSS in RSS feed creation

URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...

XSS in RSS feed creation

URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...

CVE-2008-3907

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL...

DEBIAN-CVE-2008-3906

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string...

Open redirect

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL...

CVE-2008-3907

The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL...

FreeBSD : opera -- multiple vulnerabilities (73ec1008-72f0-11dd-874b-0030843d3802)

The Opera Team reports : Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to...

Opera Web浏览器9.52版本修复多个安全漏洞

BUGTRAQ ID: 30768 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.52之前版本中存在多个安全漏洞，可能允许恶意用户执行欺骗和跨站脚本、泄露敏感信息或完全入侵用户系统。 1 当Opera作为协议处理器执行时存在错误，可能导致崩溃或执行任意代码。这个漏洞仅影响Windows平台上的Opera。 2 网页可以更改弹出窗口中打开的其他站点帧的地址，这可能导致向可信任站点帧中加载恶意内容。 3 处理自定义快捷方式和菜单命令时存在错误，允许以危险的参数执行应用程序。成功利用这个漏洞要求能够诱骗用户修改快捷方式或菜单文件。 4...