GHSA-WG4X-HF94-FJ5V Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate

The Flags module before version 5.0.11 in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 5, does not limit the rate at which content can be flagged as inappropriate, which allows remote authenticated users to spam the site...

GHSA-F8XQ-Q7PX-WG8C Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging

Impact The gradio library has a flagging functionality which saves input/output data into a CSV file on the developer's computer. This can allow a user to save arbitrary text into the CSV file, such as commands. If a program like MS Excel opens such a file, then it automatically runs these...

Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging

Impact The gradio library has a flagging functionality which saves input/output data into a CSV file on the developer's computer. This can allow a user to save arbitrary text into the CSV file, such as commands. If a program like MS Excel opens such a file, then it automatically runs these...

Command Injection

gradio is vulnerable to code injection. The vulnerability exists in flag and open functions in flagging.py due to lack of sanitization of flagging inputs which allows a malicious attacker to send and execute arbitrary code...

CVE-2021-33320

The CVE concerns the Flags module in Liferay Portal (7.3.1 and earlier) and Liferay DXP (7.0 before fix pack 96, 7.1 before fix pack 20, 7.2 before fix pack 5) where there is no rate limit on flag submissions, allowing remote authenticated users to spam site administrators via emails. Concrete de...

Bypass Access Restrictions

Moodle is vulnerable to bypassing of access restrictions. The bypass exists because the application does not check the moodle/tag:flag capability for fthe laginappropriate action, allowing any authenticated users to bypass access restrictions by using the "Flag as inappropriate" feature...

CVE-2015-2271

CVE-2015-2271 affects Moodle’s tag/user.php logic and allows remote authenticated users to bypass access restrictions when using the "Flag as inappropriate" feature. The vulnerability occurs because Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not chec...

[SECURITY] Fedora 21 Update: drupal6-flag-2.1-3.fc21

Flag is a flexible flagging system that is completely customizable by the administrator. Using this module, the site administrator can provide any number of flags for nodes, comments, users, and any other type of entity. Some possibilities include bookmarks, marking important, friends, or flag as...

[SECURITY] Fedora 20 Update: drupal6-flag-2.1-3.fc20

Flag is a flexible flagging system that is completely customizable by the administrator. Using this module, the site administrator can provide any number of flags for nodes, comments, users, and any other type of entity. Some possibilities include bookmarks, marking important, friends, or flag as...

Vanilla Forums 2.0.18.8 XSS / Insecure Permissions

Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version: 2.0.18.8 Tested on: Debian CVE : none yet When you make...

Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities

Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version:...

Vanilla Forums 2.0.18.8 - Insecure Permissions / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version:...

Spam-protection

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-1469. panel We need something like MT-Blacklist: the ability to define URL patterns that flag a page and/or comment as spam. It...