13677 matches found
CVE-2014-8293
Cross-site scripting XSS vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMGsignintopic parameter to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMGsignintopic parameter to index.php...
CVE-2014-8293
CVE-2014-8293 affects Voice Of Web AllMyGuests 0.4.1 with a reflected XSS via the AMG_signin_topic parameter to index.php. The vulnerability allows remote attackers to inject arbitrary JavaScript/HTML into the page. The provided sources consistently describe the issue but do not specify affected ...
CVE-2014-8293: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMGsignintopic parameter to index.php...
PT-2014-8445
Name of the Vulnerable Software and Affected Versions Voice Of Web AllMyGuests version 0.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the AMG signin topic parameter to "index.php". Recommendations For version 0.4.1, consider...
CVE-2014-8070
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
Open redirect
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
CVE-2014-8070
Pagekit CMS 0.8.7 is affected by CVE-2014-8070, an open redirect vulnerability. A crafted value in the redirect parameter to index.php/user/logout can redirect users to arbitrary sites, enabling phishing via trust manipulation. The OpenVAS/NVD entries corroborate a cross-site redirect risk and th...
CVE-2014-8070: Undefined Security Weakness
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
CVE-2014-8069: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to index.php/user or 2 PATHINFO to index.php...
CVE-2014-8766: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in a browse action to index.php or 2 unspecified parameters to admin.php...
PT-2014-8393
Name of the Vulnerable Software and Affected Versions YOOtheme Pagekit CMS version 0.8.7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. This can be achieved via the HTTP Referer...
PT-2014-8721
Name of the Vulnerable Software and Affected Versions Allomani Weblinks version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cat parameter in a browse action to "index.php" or via unspecified parameters to "admin.php"...
Cross site scripting
Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...
CVE-2014-4737
Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...
CVE-2014-4737
Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...
CVE-2014-4737: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to setup/index.php...
PT-2014-6084
Name of the Vulnerable Software and Affected Versions Textpattern CMS versions prior to 4.5.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "setup/index.php". This could potentially lead to unauthorized actions on...
