Open redirect

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...

CVE-2014-8070

Pagekit CMS 0.8.7 is affected by CVE-2014-8070, an open redirect vulnerability. A crafted value in the redirect parameter to index.php/user/logout can redirect users to arbitrary sites, enabling phishing via trust manipulation. The OpenVAS/NVD entries corroborate a cross-site redirect risk and th...

CVE-2014-8069: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to index.php/user or 2 PATHINFO to index.php...

CVE-2014-8070: Undefined Security Weakness

Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...

CVE-2014-8766: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in a browse action to index.php or 2 unspecified parameters to admin.php...

PT-2014-8393

Name of the Vulnerable Software and Affected Versions YOOtheme Pagekit CMS version 0.8.7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. This can be achieved via the HTTP Referer...

PT-2014-8721

Name of the Vulnerable Software and Affected Versions Allomani Weblinks version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cat parameter in a browse action to "index.php" or via unspecified parameters to "admin.php"...

CVE-2014-4737

Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...

CVE-2014-4737

Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...

CVE-2014-4737: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...

LittleSite 0.1 /index.php 任意文件下载漏洞

No description provided by source...

PT-2014-6084

Name of the Vulnerable Software and Affected Versions Textpattern CMS versions prior to 4.5.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "setup/index.php". This could potentially lead to unauthorized actions on...

OsClass 3.4.1 (index.php, file param) - Local File Inclusion

No description provided by source...

CVE-2012-5700: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/index.php or the 2 username or 3 password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some of thes...

PT-2014-2359

Name of the Vulnerable Software and Affected Versions Baby Gekko versions prior to 1.2.2f Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the id parameter to "admin/index.php", or the username or password parameters in...

Joomla Spider Calendar <= 3.2.6 - SQL Injection

No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '87242' version = '1' vulDate = '2014-08-31' author = 'anonymous' createDate =...

CVE-2014-4735

Cross-site scripting XSS vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter to index.php...

CVE-2014-4735: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter to index.php...