EUVD-2014-2717

Malware in sbrugna...

Offiria Open Source Enterprise Social Network Remote Detection

Detects the installed version of Offiria Open Source Enterprise Social Network. This script sends an HTTP GET request and tries to confirm the application from the response. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Offiria Cross-Site Scripting Vulnerability

Offiria is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:slashes&dots:offria...

[oss-security] CVE Request ---- SOAPpy 0.12.5 Multiple Vulnerabilities

Advisory ID: HTB23210 Product: Offiria Vendor: Slashes Dots Sdn Bhd. Vulnerable Versions: 2.1.0 and probably prior Tested Version: 2.1.0 Advisory Publication: April 2, 2014 without technical details Vendor Notification: April 2, 2014 Public Disclosure: May 7, 2014 Vulnerability Type: Cross-Site...

Cross-Site Scripting (XSS) in Offiria

Advisory ID: HTB23210 Product: Offiria Vendor: Slashes Dots Sdn Bhd. Vulnerable Versions: 2.1.0 and probably prior Tested Version: 2.1.0 Advisory Publication: April 2, 2014 without technical details Vendor Notification: April 2, 2014 Public Disclosure: May 7, 2014 Vulnerability Type: Cross-Site...

CVE-2014-2689

Cross-site scripting XSS vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to installer/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to installer/index.php...

CVE-2014-2689

Offiria (vendor Slashes & Dots Sdn Bhd) 2.1.0 and earlier is affected by a reflected XSS via PATH_INFO to /installer/index.php. The vulnerability arises from insufficient sanitisation of user-supplied data in the URI, enabling remote script/HTML execution in the victim’s browser. CVSSv2 base scor...

CVE-2014-2689

Cross-site scripting XSS vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to installer/index.php...

Offiria 2.1.0 Cross Site Scripting Vulnerability

Offiria version 2.1.0 suffers from a cross site scripting vulnerability. Product: Offiria Vendor: Slashes & Dots Sdn Bhd. Vulnerable Versions: 2.1.0 and probably prior Tested Version: 2.1.0 Advisory Publication: April 2, 2014 without technical details Vendor Notification: April 2, 2014 Public...

Offiria 2.1.0 Cross Site Scripting

Advisory ID: HTB23210 Product: Offiria Vendor: Slashes & Dots Sdn Bhd. Vulnerable Versions: 2.1.0 and probably prior Tested Version: 2.1.0 Advisory Publication: April 2, 2014 without technical details Vendor Notification: April 2, 2014 Public Disclosure: May 7, 2014 Vulnerability Type: Cross-Site...

Cross-Site Scripting (XSS) in Offiria

High-Tech Bridge Security Research Lab discovered vulnerability in Offiria, which can be exploited to perform Cross-Site Scripting XSS attacks against users of vulnerable application. 1 Reflected Cross-Site Scripting XSS in Offiria: CVE-2014-2689 The vulnerability exists due to insufficient...