Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)

The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which...

Mozilla: Frames can shadow top.location (MFSA 2012-103)

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct...

Mozilla: evalInSanbox location context incorrectly applied (MFSA 2012-93)

The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which...

WordPress Madebymilk SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress madebymilk Theme SQL Injection | Google Dork: inurl:/madebymilk/voting-popup.php | Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

WordPress ArribaLaEsteban SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title:Wordpress | ArribaLaEsteban theme SQL Injection Vulnerability | Google Dork: inurl:/estadisticas/fichajugador.php Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

iDev Rentals 1.0 - Multiple Vulnerabilities

iDev Rentals 1.0 - Multiple Vulnerabilities Title: ====== iDev Rentals v1.0 - Multiple Web Vulnerabilities Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 758 Common Vulnerability Scoring System: ==================================...

MD Webmarketing Cross Site Scripting / SQL Injection

Exploit Title : MD-WEBMARKETING - SQL Injection/Cross Site Scripting Vulnerabilities Date : 06-11-2012 Author : Caleb Bucker Independent Security Researcher Contact : https://twitter.com/CalebDrugs Website : www.calebbucker.blogspot.com Vendor : MD Webmarketing URL Vendor :...

Mozilla Seamonkey Multiple Vulnerabilities - November12 (Mac OS X)

This host is installed with Mozilla Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeymultvulnnov12macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities - November12 Mac OS X Authors: Arun Kallavi Copyright:...

Mozilla Thunderbird Multiple Vulnerabilities - November12 (Windows)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvulnnov12win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities - November12 Windows Authors: Arun Kallavi Copyright:...

Mozilla Firefox Multiple Vulnerabilities - November12 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnnov12win.nasl 5956 2017-04-14 09:02:12Z teissa $ Mozilla Firefox Multiple Vulnerabilities - November12 Windows Authors: Rachana Shetty Copyright: Copyright c...

Mozilla Firefox Multiple Vulnerabilities (Nov 2012) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8348)

MozillaFirefox was updated to the 10.0.10ESR security release. The following issues have been fixed : - Mozilla has fixed a number of issues related to the Location object in order to enhance overall security. Details for each of the current fixed issues are below. MFSA 2012-90 Thunderbird is onl...

CVE-2012-4488

The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node access permissions, which allows remote attackers to read node or user results via the location search page...

Code injection

The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node access permissions, which allows remote attackers to read node or user results via the location search page...

CVE-2012-4488

CVE-2012-4488 – Drupal Location module) affected: Location module 6.x (before 6.x-3.2) and 7.x (before 7.x-3.0-alpha1). Issue: improper access control in the location search page allows remote attackers to read node or user results. Impact: exposure of node/user data due to insufficient permissio...

CVE-2012-4488

The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node access permissions, which allows remote attackers to read node or user results via the location search page...

RHEL 5 / 6 : thunderbird (RHSA-2012:1413)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1413 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Multiple flaws were found in the location object implementation in...

Mozilla: Fixes for Location object issues (MFSA 2012-90)

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats...

Mozilla: Fixes for Location object issues (MFSA 2012-90)

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object aka window.location, which makes it easier for remote attackers to...

Mozilla: Fixes for Location object issues (MFSA 2012-90)

The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easie...