CVE-2012-2585

Multiple cross-site scripting XSS vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted Cascading Style Sheets CSS expression property, 3 a CSS expression property in the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted Cascading Style Sheets CSS expression property, 3 a CSS expression property in the STYLE...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted Cascading Style Sheets CSS expression property, 3 a CSS expression property in the STYLE...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted Cascading Style Sheets CSS expression property, 3 a CSS expression property in the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted SRC attribute of an IFRAME element, 3 a crafted CONTENT attribute of an...

CVE-2012-2571

Multiple cross-site scripting XSS vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted Cascading Style Sheets CSS expression property, 3 a CSS expression property in the STYLE...

CVE-2012-2571

Multiple cross-site scripting XSS vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted Cascading Style Sheets CSS expression property, 3 a CSS expression property in the STYLE...

PT-2012-4111

Name of the Vulnerable Software and Affected Versions WinWebMail Server version 3.8.1.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via an e-mail message body using various methods, including a SCRIPT element, crafted Cascading Style Sheets CSS expressions...

CVE-2012-2729

Multiple cross-site request forgery CSRF vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 delete or 2 add a meta tag entry...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the SimpleMeta module 6.x-1.x before 6.x-2.0 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 delete or 2 add a meta tag entry...

SA-CONTRIB-2012-100 - SimpleMeta - Cross Site Request Forgery (CSRF)

The Simple Meta module provides a method to set meta tags, such as page title, description and keywords for nodes, views and other pages. The module doesn't sufficiently confirm user intent when adding and deleting meta tag entries allowing a malicious user to trick a site admin into deleting...

WordPress User Meta 1.1.1 Shell Upload

Exploit Title: Wordpress User Meta Version 1.1.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/user-meta/framework/helper/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://user-meta.com/ Software Link: http://downloads.wordpress.org/plugin/user-meta.1.1.1.zip...

WordPress Plugin User Meta 1.1.1 - Arbitrary File Upload

WordPress Plugin User Meta 1.1.1 - Arbitrary File Upload Exploit Title: Wordpress User Meta Version 1.1.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/user-meta/framework/helper/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://user-meta.com/ Software Link:...

WordPress User Meta Plugin 1.1.1 - Arbitrary File Upload

User Meta plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible. Solution...

Wordpress User Meta Version 1.1.1 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress User Meta Version 1.1.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/user-meta/framework/helper/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://user-meta.com/ Software Link:...

WordPress Plugin User Meta 1.1.1 - Arbitrary File Upload

Exploit Title: Wordpress User Meta Version 1.1.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/user-meta/framework/helper/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://user-meta.com/ Software Link: http://downloads.wordpress.org/plugin/user-meta.1.1.1.zip...

CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

DEBIAN-CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...