CVE-2017-1001001

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...

CVE-2017-1001001

Removed by vendor...

CVE-2017-1001001

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges...

CVE-2017-1001001

CVE-2017-1001001 affects PluXml 5.6; a stored cross-site scripting flaw in the article creation page enables escalation of privileges. The included sources describe the vulnerability but do not provide concrete patch/version remediation details within the supplied materials.

Pluxml 0.3.1 - Remote Code Execution Exploit

No description provided by source. ?php C:\ sploit.php -url http://victim.com/pluxml0.3.1/ -ip 90.27.10.196 /Waiting for connection on http://90.27.10.196:80/ !Now you have to make the victim to click on the url +Received 395 bytes from 182.26.54.2:2007 +Sending 366 bytes to 182.26.54.2:2007...

PluXml 5.1.5 - Local File Inclusion

No description provided by source...

Pluxml-Blog 4.2 'core/admin/auth.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37384/info Pluxml-Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

CVE-2012-4675

Cross-site scripting XSS vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update...

CVE-2012-4674

PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...

CVE-2012-2227

Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the defaultlang parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update...

Directory traversal

Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the defaultlang parameter...

Design/Logic Flaw

PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...

CVE-2012-4675

CVE-2012-4675 is an XSS vulnerability in PluXml 5.1.6 that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update. The issue is discussed across multiple records (NVD, CVE List, PRION, Debian tracker, etc.) and is characterized by a MEDIUM ba...

CVE-2012-4675

Removed by vendor...

CVE-2012-4674

Removed by vendor...

CVE-2012-2227

Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the defaultlang parameter...

CVE-2012-4675

Cross-site scripting XSS vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update...

CVE-2012-4674

PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...

CVE-2012-4674

PluXml before 5.1.6 is vulnerable: remote attackers can obtain the installation path via the PHPSESSID. Root cause is improper handling of PHPSESSID leading to path disclosure. Affected software: PluXml (versions prior to 5.1.6). Impact stated: potential information disclosure of installation pat...