CVE-2015-2975

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

WordPress Unite Gallery Lite 1.4.6 CSRF / SQL Injection

Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL: https://wordpress.org/plugins/unite-gallery-lite/ Vulnerability Type: Cross-site Request Forgery...

CVE-2015-2976

Multiple cross-site scripting XSS vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted HTML document or 2 a crafted URL that is mishandled during access-log analysis...

CVE-2015-2976

CVE-2015-2976 affects Research Artisan Lite prior to 1.18. The provided documents confirm multiple cross-site scripting (XSS) vulnerabilities (CWE-79) that can allow remote attackers to inject arbitrary scripts via either a crafted HTML document or a crafted URL processed during access-log analys...

Unite Gallery Lite <= 1.4.6 - CSRF & Authenticated SQL Injection

The Unite Gallery Lite WordPress plugin was affected by a CSRF & Authenticated SQL Injection security vulnerability...

Research Artisan Lite does not properly perform authentication

Overview Research Artisan Lite provided by Research Artisan Project is an access analysis tool. Research Artisan Lite does not properly perform authentication CWE-592. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer unde...

Multiple Cross-Site Scripting Vulnerabilities in MySql Lite Administrator beta-1

MySql Lite Administrator is a graphical tool for managing Mysql database files. A cross-site scripting vulnerability exists in MySql Lite Administrator beta-1. Due to the tabella.php, coloni.php, and insert.php scripts failing to adequately filter the 'tablename' parameter; the coloni.php script...

CVE-2015-5064

Multiple cross-site scripting XSS vulnerabilities in MySql Lite Administrator mysql-lite-administrator beta-1 allow remote attackers to inject arbitrary web script or HTML via the tablename parameter to 1 tabella.php, 2 coloni.php, or 3 insert.php or 4 numrow parameter to coloni.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MySql Lite Administrator mysql-lite-administrator beta-1 allow remote attackers to inject arbitrary web script or HTML via the tablename parameter to 1 tabella.php, 2 coloni.php, or 3 insert.php or 4 numrow parameter to coloni.php...

CVE-2015-5064

Multiple cross-site scripting XSS vulnerabilities in MySql Lite Administrator mysql-lite-administrator beta-1 allow remote attackers to inject arbitrary web script or HTML via the tablename parameter to 1 tabella.php, 2 coloni.php, or 3 insert.php or 4 numrow parameter to coloni.php...

CVE-2015-5064

CVE-2015-5064 relates to multiple XSS vulnerabilities in MySql Lite Administrator (beta-1). The flaws allow remote attackers to inject arbitrary web script or HTML via the table_name parameter to tabella.php, coloni.php, or insert.php, or the num_row parameter to coloni.php. The root cause is ins...

WordPress Wow Moodboard Lite Plugin Open Redirect Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Wow Moodboard Lite is one of the template plug-ins for adding videos and images to web pages. An open redirect...

Wow Moodboard Lite <= 1.1.1.1 - Open Redirect

The Wow Moodboard Lite WordPress plugin was affected by an Open Redirect security vulnerability...

WordPress Banners Lite Plugin <= 1.4.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

The vulnerability of the Gentoo Linux operating system allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pcsc-lite package up to version 1.6.6 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The pcsc-lite package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

OTRS 3.x Cross Site Scripting

Exploit Title: Stored Cross-Site Scripting XSS in OTRS Date: 28.01.2014 Exploit Author: Adam Ziaja http://adamziaja.com Vendor Homepage: https://www.otrs.com Version: 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 CVE : CVE-2014-1695 !/usr/bin/perl -w use strict; use MIME::Lite;...

OTRS < 3.1.x & < 3.2.x & < 3.3.x - Stored Cross-Site Scripting (XSS) Vulnerability

Exploit for php platform in category web applications Exploit Title: Stored Cross-Site Scripting XSS in OTRS Date: 28.01.2014 Exploit Author: Adam Ziaja http://adamziaja.com Vendor Homepage: https://www.otrs.com Version: 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 CVE :...

OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting

Exploit Title: Stored Cross-Site Scripting XSS in OTRS Date: 28.01.2014 Exploit Author: Adam Ziaja http://adamziaja.com Vendor Homepage: https://www.otrs.com Version: 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 CVE : CVE-2014-1695 !/usr/bin/perl -w use strict; use MIME::Lite;...

Etherpad Lite 'utils/Minify.js' Directory Traversal Vulnerability

Etherpad is software for rich text collaboration in a multiplayer environment. A directory traversal vulnerability exists in Etherpad Lite 'utils/Minify.js'. This allows remote attackers to exploit the vulnerability by using path traversal characters ". . /" to access or read arbitrary files to...