SQL Injection Vulnerability in the APP Interface of Jiangsu Chuhuai Software Technology Development Co.

Mobile Phone Petition Mass Version APP is the mass-specific version of Jiangsu Mobile Phone Petition APP with technical support provided by Jiangsu Chuhuai Software Technology Development Co. There is a SQL injection vulnerability in the interface of Jiangsu Chuhuai Software Technology Developmen...

campbell.bookoo.com XSS vulnerability

Open Bug Bounty ID: OBB-363656 Description| Value ---|--- Affected Website:| campbell.bookoo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Stored Cross-site Scripting Vulnerability in the Sunshine Letters and Visits Comprehensive Service Management System of Jiangsu Chuhuai Science and Technology Development Co.

Sunshine Petition Comprehensive Service Management System is a petition information system launched by Jiangsu Chuhuaike Software Technology Development Co. A stored cross-site scripting vulnerability exists in the Sunshine Petition Comprehensive Service Management System of Jiangsu Chuhuaike...

Drupal Petition module cross-site scripting vulnerability (CNVD-2015-03892)

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Petitions is one of the petition modules used in the U.S. White House website. A cross-site scripting vulnerability exists in the administration page of the Drupal Petitions module. A...

CVE-2015-4377

Cross-site scripting XSS vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors...

CVE-2015-4377

Cross-site scripting XSS vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors...

CVE-2015-4377

CVE-2015-4377 describes a Cross-site scripting (XSS) vulnerability in the Drupal Petition module (6.x-1.x) prior to 6.x-1.3. The issue affects the module’s administration pages and can be triggered by remote authenticated users who have the create petition permission, allowing injection of arbitr...

Drupal Petition Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Petition, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

Petition - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-081

The Petition module enables you to create petitions which users may sign. The module doesn't sufficiently sanitize user supplied text in some administration pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role...

Phishers Use Luis Suarez Bite as Bait

The World Cup is the most popular sporting event on the planet, and not just among sports fans; attackers and scammers of all stripes love it as well, as it presents a unique opportunity to separate victims from their money. Phishing and malware scams tied to the World Cup in Brazil have been...

Jax Petition 3.06 Book smileys.php languagepack Parameter Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal string...

Academics Call for End to Mass Surveillance

A group of hundreds of academics from countries around the world have started a petition that demands Western governments, such as those in the United States and UK, stop the mass surveillance programs they have in place and “effectively protect everyone’s fundamental rights and freedoms”. The...

Privacy, Human Rights Groups Form New Anti-Surveillance Coalition

A large group of privacy and digital rights organizations has put together a new effort to urge politicians to curtail the mass surveillance operations that have been exposed in the last few months. The new coalition has developed a set of 13 principles for governments to follow in their...

EU Petition Seeks to Restrict Export of 'Digital Arms'

A Dutch member of the European parliament is supporting a grass-roots effort to restrict the export of surveillance software such as FinFisher and others, which are used by some governments and law-enforcement agencies to monitor their citizens’ activities. The effort, dubbed Stop Digital Arms, i...

Petition Seeks Removal of Alexander as NSA Director

It has been a rough few months for the National Security Agency, and specifically for its director, Gen. Keith Alexander. The leaks of details of NSA surveillance programs by former contractor Edward Snowden have taken over the news cycle this summer and put the agency’s business out in the open...

Woohooo! After #SopaBlackout, Congress Postpones Action on #SOPA, #PIPA

Woohooo! After SopaBlackout, Congress Postpones Action on SOPA, PIPA A big hurrah to you!!!!! We've won for now SOPA and PIPA were dropped by Congress today. The votes we've been scrambling to mobilize against have been cancelled. When the entire Internet gets angry, Congress takes notice. Both t...

CVE-2011-4560

Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...

Cross site scripting

Cross-site scripting XSS vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition...

CVE-2011-4560

The Drupal Petition Node module (6.x-1.x) is vulnerable to a cross-site scripting (XSS) flaw in versions before 6.x-1.5. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the petition signing process. Affected product/version: Pe...