Wordpress Developer Formatter CSRF Vulnerability

Wordpress Developer Formatter suffers from a cross site request forgery vulnerability which can be used to add persistent XSS into posts which could then lead to cookie stealing, malware distribution or even a defacement...

Code injection

The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to email the stored address via unspecified vectors...

PT-2012-6038

Name of the Vulnerable Software and Affected Versions Email Field module versions 6.x-1.x before 6.x-1.3 for Drupal Description The issue allows remote attackers to email the stored address via unspecified vectors when the field contact field formatter is set to the full or teaser display mode an...

CVE-2012-4499

The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to email the stored address in the entity via unspecified vectors...

CVE-2012-4485

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

Code injection

The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to email the stored address in the entity via unspecified vectors...

CVE-2012-4485

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

CVE-2012-4485

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

CVE-2012-4485: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

PT-2012-5431

Name of the Vulnerable Software and Affected Versions Gallery formatter module versions prior to 7.x-1.2 Description The issue allows remote authenticated users with permissions to create a node or entity to inject arbitrary web script or HTML via the title or alt parameter in the galleryformatte...

PT-2012-5445

Name of the Vulnerable Software and Affected Versions Email Field module versions 6.x-1.x before 6.x-1.2 Email Field module versions 7.x-1.x before 7.x-1.1 Description The issue affects the contact formatter page in the Email Field module, allowing remote attackers to email the stored address in...

OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.238 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related ...

CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DEBIAN-CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4928

The CVE-2011-4928 entry is for an XSS vulnerability in Redmine’s textile formatter prior to version 1.0.5, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided documents confirm the affected component and the general impact, but do not include con...

CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...