10401 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
CVE-2010-2130
Cross-site scripting XSS vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
CVE-2010-2130
CVE-2010-2130 describes a Cross-site scripting (XSS) vulnerability in the ARISg 5.0 product, specifically in the wflogin.jsp page, exploitable via the errmsg parameter to inject arbitrary script/HTML. The connected documents confirm the vulnerable component (wflogin.jsp) and parameter but do not ...
Read Samba [global] and [netlogon] Configuration
This plugin uses ssh to Read Samba global and netlogon Configuration. OpenVAS Vulnerability Test $Id: GSHBSSHSamba.nasl 7052 2017-09-04 11:50:51Z teissa $ Read Samba global and netlogon Configuration Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Discuz! 7.x/6.x论坛绕过全局变量防御漏洞
Discuz!是一款华人地区非常流行的Web论坛程序。 由于php5.3.x版本php.ini的设置中requestorder默认值为GP，导致Discuz! 6.x/7.x中可以绕过全局变量防御。 在include/global.func.php代码中： function daddslashes$string, $force = 0 !defined'MAGICQUOTESGPC' && define'MAGICQUOTESGPC', getmagicquotesgpc; if!MAGICQUOTESGPC || $force ifisarray$string foreach$stri...
CVE-2010-1630
Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...
Design/Logic Flaw
Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...
CVE-2010-1630
Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...
CVE-2010-1630
Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...
Discuz! 6. x/7. x a global variable Defense bypass vulnerability-vulnerability warning-the black bar safety net
Due to php5. 3. x version php. ini settings requestorder the default value for the GP, resulting in Discuz! 6. x/7. x a global variable Defense bypass vulnerability include/global. func. php code: function daddslashes$string, $force = 0 ! defined'MAGICQUOTESGPC' && define'MAGICQUOTESGPC',...
Discuz! 6.x/7.x 全局变量防御绕过漏洞
No description provided by source...
Protecting Customers From Online Threats
Allison Miller of PayPal’s Global Risk Management group discusses the challenges of keeping the service’s customers safe online in a session at the SOURCE conference in Boston...
Cross site request forgery (csrf)
Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...
CVE-2010-1614
Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...
CVE-2010-1614
Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...
CVE-2010-1614
Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...
kernel: bug in GFS/GFS2 locking code leads to dos
The gfs2lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfslock function in the Linux kernel on Red Hat Enterprise Linux RHEL 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a...
Announcement Preview banner is a vector for an XSS attack
The announcement preview banner is currently displayed via the global decorator. It can be used for an XSS attack on virtually every page, via the announcementpreviewbannerst URL parameter. We should display the preview only locally in the admin section...
Announcement Preview banner is a vector for an XSS attack
The announcement preview banner is currently displayed via the global decorator. It can be used for an XSS attack on virtually every page, via the announcementpreviewbannerst URL parameter. We should display the preview only locally in the admin section...
Announcement Preview banner is a vector for an XSS attack
The announcement preview banner is currently displayed via the global decorator. It can be used for an XSS attack on virtually every page, via the announcementpreviewbannerst URL parameter. We should display the preview only locally in the admin section...