Vulnerabilities Plague File Lite, File Pro iOS Apps

Multiple vulnerabilities have been discovered in both File Lite and File Pro, two file management applications created by Perception Systems for iOS, currently available on Apple’s App Store. Researchers at Vulnerability Laboratory found the bugs on the latest builds of File Lite and File Pro –...

File Lite 3.33.5 PRO iOS - Multiple Vulnerabilities

File Lite 3.33.5 PRO iOS - Multiple Vulnerabilities Title: ====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System:...

File Lite 3.3/3.5 PRO iOS - Multiple Vulnerabilities

Title: ====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: =============...

File List 3.3 / 3.5 PRO XSS / LFI / File Upload

Title: ====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: =============...

Design/Logic Flaw

The 1 OWA Helper and 2 OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own passwords, and consequently bypass an Office 365 restriction, via unspecified vectors...

CVE-2013-2308

CVE-2013-2308 affects SoftBank Online Service Gate components: the OWA Helper and OSG Lite . The vulnerability allows remote authenticated users to obtain their own Office 365 passwords, thereby bypassing a platform restriction, via unspecified vectors. This is documented in multiple sources (NVD...

CVE-2013-2308

The 1 OWA Helper and 2 OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own passwords, and consequently bypass an Office 365 restriction, via unspecified vectors...

JVN#61972596: Online Service Gate vulnerable in Office 365 password management

Online Service Gate provided by SoftBank Technology is a solution to manage the use of Office 365 which allows a system administrator to manage Office 365 users' passwords. Office 365 users' passwords are intended to be managed by a system administrator and cannot be obtained by users. OWA Helper...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

CVE-2013-2702

CVE-2013-2702 affects the WordPress plugin Easy AdSense Lite (before 6.10). The vulnerability is a cross-site request forgery (CSRF) in the plugin’s settings that allows remote attackers to hijack authentication and perform privileged actions on behalf of arbitrary users. Exploitation details are...

File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities

Document Title: =============== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=939 Release Date: ============= 2013-05-04 Vulnerability Laboratory ID VL-ID: ====================================...

Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability

This host is installed with Wordpress WP Banners Lite Plugin and is prone to xss vulnerability. OpenVAS Vulnerability Test $Id: gbwordpresswpbannerslitexssvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability Authors: Thanga Prakash S...

WordPress WP Banners Lite Plugin Cross Site Scripting Vulnerability

WordPress WP Banners Lite Plugin is prone to an XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XSS Flaw in WordPress Plugin Allows Injection of Malicious Code

Hardly a week goes by without some new vulnerability in WordPress or one of its components showing up on a mailing list or in a security advisory. This week’s first entrant is a newly disclosed flaw in a plugin that displays ad banners on WordPress sites, a bug that enables an attacker to inject...

WP Banners Lite 1.40 Cross Site Scripting

I. Background -------------- - Affected plugin: WP Banners Lite - Plugin Description: The plugin easily allows you to manage ad banners on your site. - Plugin URL: http://wordpress.org/extend/plugins/wp-banners-lite/ - Tested Version: 1.29, 1.31, 1.40 - Reported: YES - but no answer - Report Date...

WordPress Plugin Banners Lite - 'wpbanners_show.php' HTML Injection

source: https://www.securityfocus.com/bid/58671/info The Banners Lite plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the...

WordPress Banners Lite Plugin - HTML Injection Vulnerability

WordPress Banners Lite plugin is prone to an HTML-injection vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication...

WordPress Plugin Banners Lite - wpbanners_show.php HTML Injection

WordPress Plugin Banners Lite - wpbannersshow.php HTML Injection source: https://www.securityfocus.com/bid/58671/info The Banners Lite plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow...