Cross site scripting

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192...

Cross site scripting

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

CVE-2011-5192

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

CVE-2011-5191

CVE-2011-5191 describes an XSS vulnerability in the Pretty Link Lite WordPress plugin, specifically in the pretty-bar.php code path. The flaw allows remote attackers to inject arbitrary web script or HTML via the slug parameter in versions prior to 1.5.4. This is a distinct vulnerability from CVE...

CVE-2011-5192

CVE-2011-5192 describes a Cross-site scripting (XSS) vulnerability in the Pretty Link Lite WordPress plugin. Affected component: pretty-bar.php in Pretty Link Lite. Vulnerable until version 1.5.5 (i.e., "before 1.5.6"). Root cause: XSS via the slug parameter, enabling an attacker to inject arbitr...

PT-2012-2168

Name of the Vulnerable Software and Affected Versions Pretty Link Lite plugin versions prior to 1.5.4 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the slug parameter in the pretty-bar.php file...

PT-2012-2169

Name of the Vulnerable Software and Affected Versions Pretty Link Lite plugin versions prior to 1.5.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the slug parameter in the pretty-bar.php file...

CVE-2011-5192: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

CVE-2011-5191: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192...

WordPress Pretty Link Lite Plugin <= 1.5.3 - XSS

Because of this vulnerability in pretty-bar.php, the attackers can inject arbitrary web script or HTML via the "slug" parameter. Solution Update the plugin...

WordPress Pretty Link Lite Plugin <= 1.5.5 - XSS

Because of this vulnerability in pretty-bar.php, the attackers can inject arbitrary web script or HTML via the "slug" parameter. Solution Update the plugin...

CVE-2010-5244

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

CVE-2010-5239

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details a...

Design/Logic Flaw

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

Design/Logic Flaw

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details a...

CVE-2010-5239

The CVE-2010-5239 issue affects DAEMON Tools Lite (v4.35.6.0091) and DAEMON Tools Pro Standard (v4.36.0309.0160). It is an untrusted search path/LPE vulnerability where a Trojan horse mfc80loc.dll in the current working directory can be loaded to escalate privileges (illustrated by a directory co...

CVE-2010-5239: Undefined Security Weakness

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details a...

CVE-2010-5244: Undefined Security Weakness

Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file. NOTE: some of these details are obtained from third...

PT-2012-1449

Name of the Vulnerable Software and Affected Versions DAEMON Tools Lite version 4.35.6.0091 DAEMON Tools Pro Standard version 4.36.0309.0160 Description The issue allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory. This can be demonstrated ...

PT-2012-1454

Name of the Vulnerable Software and Affected Versions SiSoftware Sandra 2010 Lite version 2010.7.16.52 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. This can be demonstrated by a directory that contains a .sis file...