PT-2014-8729

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.2.15 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the context key parameter in the manager/index.php file. Recommendations For versions prio...

CVE-2014-8774: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attackers to inject arbitrary web script or HTML via the contextkey parameter...

PT-2014-8896

Name of the Vulnerable Software and Affected Versions MyBB versions 1.8.x before 1.8.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the type parameter to "report.php", the signature parameter in a "do...

CVE-2014-9176

The CVE-2014-9176 entry describes a cross-site scripting (XSS) vulnerability in the WordPress plugin InstaSqueeze Sexy Squeeze Pages, exploitable via the id parameter to lp/index.php. Connected sources confirm the affected component and payload path; no explicit exploit details or affected versio...

PT-2014-8867

Name of the Vulnerable Software and Affected Versions InstaSqueeze Sexy Squeeze Pages plugin for WordPress affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter to "lp/index.php" A...

CVE-2014-9176: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the InstaSqueeze Sexy Squeeze Pages plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

PT-2014-8829

Name of the Vulnerable Software and Affected Versions Kunena component versions prior to 3.0.6 for Joomla! Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the index value in an array parameter, such as the topics parameter in an...

CVE-2014-9102: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via the index value in an array parameter, as demonstrated by the topics parameter in an unfavorite action to index.php...

CVE-2014-7847

iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service resource consumption by triggering the calculation of an estimated latitude and longitude for an IP address...

CVE-2014-7847

iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service resource consumption by triggering the calculation of an estimated latitude and longitude for an IP address...

CVE-2014-7847: Undefined Security Weakness

iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service resource consumption by triggering the calculation of an estimated latitude and longitude for an IP address...

CVE-2014-8539

Cross-site scripting XSS vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the modsimpleemailformfield21 parameter to index.php...

CVE-2014-8539

Cross-site scripting XSS vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the modsimpleemailformfield21 parameter to index.php...

PT-2014-8602

Name of the Vulnerable Software and Affected Versions Simple Email Form versions 1.8.5 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the mod simpleemailform field2 1 parameter to "index.php". Recommendations For Simple...

CVE-2014-8539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the modsimpleemailformfield21 parameter to index.php...

CVE-2014-8996

Multiple cross-site scripting XSS vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 authorname or 2 content parameter to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 authorname or 2 content parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a memberprofile action to index.php...

CVE-2014-9005

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the 1 country, 2 gender1, or 3 gender2 parameter in a search action to index.php...

PT-2014-8777

Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.0 through 2.0.5.1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to "index.php", which is processed by the preg replace function with the eval switch. This c...