6879 matches found
CVE-2014-5274
Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...
CVE-2014-5273
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 browse table page, related to js/sql.js; 2 ENUM editor page, related to...
CVE-2014-5273
CVE-2014-5273 corresponds to multiple XSS vulnerabilities in phpMyAdmin affecting 4.0.x (<4.0.10.2), 4.1.x (<4.1.14.3), and 4.2.x (
CVE-2014-5274
Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...
CVE-2014-5273: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 browse table page, related to js/sql.js; 2 ENUM editor page, related to...
CVE-2014-5274: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js...
PT-2014-6386
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.1.x through 4.1.14.2 phpMyAdmin versions 4.2.x through 4.2.7.0 Description A cross-site scripting XSS issue exists in the view operations page, allowing remote authenticated users to inject arbitrary web script or HTML vi...
php云问答功能处存储型xss
简要描述： 需要主动触发。 详细说明： http://www.hr135.com/ask/index.php 测试地址：http://www.hr135.com/ask/index.php?c=content&id=162 超级链接写入：javascriptalert1 &NewLine是HTML5新增的实体命名编码 firebug之类工具修改链接名称增加欺骗性 成功触发JS 使用追问功能再次添加超级链接：javascriptalertdocument.cookie 成功弹出cookie 漏洞证明：...
JS MultiHotel 2.2.1 - refreshDate.php roomid Parameter Reflected XSS
The js-multihotel WordPress plugin was affected by a refreshDate.php roomid Parameter Reflected XSS security vulnerability...
JS MultiHotel 2.2.1 - includes/delete_img.php path Parameter Reflected XSS
The js-multihotel WordPress plugin was affected by an includes/deleteimg.php path Parameter Reflected XSS security vulnerability...
Traffic Analyzer 3.3.2 - js/ta_loaded.js.php aoid Parameter XSS
The trafficanalyzer WordPress plugin was affected by a js/taloaded.js.php aoid Parameter XSS security vulnerability...
Js-appointment <= 1.5 - SQL Injection
The Js-appointment WordPress plugin was affected by a SQL Injection security vulnerability...
Code injection
WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the 1 js or 2 cat parameter...
PT-2014-6291
Name of the Vulnerable Software and Affected Versions WeBid version 1.1.1 Description The issue allows remote attackers to conduct an LDAP injection attack. This can be achieved via the js or cat parameter. Recommendations For WeBid version 1.1.1, avoid using the js and cat parameters until the...
PT-2014-7144
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.2 phpMyAdmin versions 4.1.x through 4.1.14.3 phpMyAdmin versions 4.2.x through 4.2.8.0 Description A cross-site scripting XSS issue exists in the micro history implementation, allowing remote attackers ...
CVE-2014-5114: Undefined Security Weakness
WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the 1 js or 2 cat parameter...
CVE-2014-4986
Multiple cross-site scripting XSS vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 table name or 2 column name that is improperly handled...
CVE-2014-4986: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 table name or 2 column name that is improperly handled...
PT-2014-6243
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.0 phpMyAdmin versions 4.1.x through 4.1.14.1 phpMyAdmin versions 4.2.x through 4.2.5 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted table na...