EUVD-2006-2296

Malware in sbrugna...

EUVD-2006-2295

Malware in sbrugna...

CVE-2013-1758

Cross-site scripting XSS vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pfad parameter to wp-admin/options-general.php. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pfad parameter to wp-admin/options-general.php. NOTE: some of these details are obtained from third party information...

CVE-2013-1758

CVE-2013-1758 affects the Marekkis Watermark WordPress plugin (version 0.9.2) and enables cross-site scripting via the pfad parameter to wp-admin/options-general.php. The flaw is a reflective XSS in the admin path, allowing remote attackers to inject arbitrary script/HTML. Public sources consiste...

PT-2014-2489

Name of the Vulnerable Software and Affected Versions Marekkis Watermark plugin version 0.9.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the pfad parameter to the "wp-admin/options-general.php" API...

CVE-2013-1758: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pfad parameter to wp-admin/options-general.php. NOTE: some of these details are obtained from third party information...

WordPress Marekkis Watermark Plugin <= 0.9.2 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "pfad" parameter to wp-admin/options-general.php. Solution Update the plugin...

PT-2011-1813

Name of the Vulnerable Software and Affected Versions Kontakt Formular version 1.1 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the script pfad parameter in the formmailer.php file. Recommendations For Kontakt Formular version 1.1, consider restricting...

PT-2011-1819

Name of the Vulnerable Software and Affected Versions Gaestebuch version 1.2 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the script pfad parameter in the guestbook/gbook.php file. Recommendations For Gaestebuch version 1.2, avoid using the script pfad...

CVE-2008-6377: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...

CVE-2006-4045: Undefined Security Weakness

PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2294

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2294: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2295: Undefined Security Weakness

Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to 1 index.php and 2 galerie.php...