CVE-2012-2227

PluXml is affected by a Local File Inclusion in update/index.php before version 5.1.6. The issue arises from using the default_lang parameter in include_once(), enabling an attacker to traverse directories and include arbitrary local files. Public disclosures and exploits reference PluXml 5.1.5 (...

PluXml 5.1.5 LFI

Local file include vulnerability in PluXml defaultlang parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Local File Inclusion in PluXml

Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE References: CVE-2012-2227 Solution...

PluXml 5.1.5 Local File Inclusion

Exploit for php platform in category web applications Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE...

PluXml 5.1.5 - Local File Inclusion

Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE References: CVE-2012-2227 Solution...

PluXml 5.1.5 - Local File Inclusion

PluXml 5.1.5 - Local File Inclusion Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CV...

PluXml 5.1.5 Local File Inclusion

Advisory ID: HTB23086 Product: PluXml Vendor: pluxml.org Vulnerable Versions: 5.1.5 and probably prior Tested Version: 5.1.5 Vendor Notification: 11 April 2012 Vendor Patch: 16 April 2012 Public Disclosure: 2 May 2012 Vulnerability Type: Local File Inclusion CVE References: CVE-2012-2227 Solution...

Local File Inclusion in PluXml

High-Tech Bridge SA Security Research Lab has discovered vulnerabiliy in PluXml, which can be exploited to perform Local File Inclusion attacks. 1 Local File Inclusion in PluXml 1.1 Input passed via the "defaultlang" POST parameter to /update/index.php is not properly verified before being used i...

PluXml 5.0.1 Cross Site Scripting

==================================== Vulnerability ID: HTB22631 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerabilit...

XSS vulnerability in PluXml

Vulnerability ID: HTB22631 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored XSS Cross Site Scripti...

PluXml 5.0.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

PluXml 5.0.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/44069/info PluXml is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

XSS vulnerability in PluXml

Vulnerability ID: HTB22633 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml2.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: XSS Cross Site Scripting...

XSS vulnerability in PluXml

Vulnerability ID: HTB22634 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml3.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored XSS Cross Site...

XSS vulnerability in PluXml

Vulnerability ID: HTB22632 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml1.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: XSS Cross Site Scripting...

PluXml 5.0.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/44069/info PluXml is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTM...

Multiple Vulnerabilities in PluXml

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PluXml which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in PluXml 1.1 The vulnerability exists due to input sanitation...

Pluxml-Blog Beta 4.2 XSS

Script Name : Pluxml-blog Version : Pluxml-blog bêta 4.2 Bug Type : XSS vulnerability Found by : Metropolis Discovered : 17 December 2009 Download app : http://telechargements.pluxml.org/pluxml-blog-beta4-2.zip PoC : http://target/path/core/admin/auth.php?p=1Xss example :...

Pluxml-Blog 4.2 - coreadminauth.php Cross-Site Scripting

Pluxml-Blog 4.2 - coreadminauth.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37384/info Pluxml-Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

Pluxml-Blog B鳡 4.2 XSS Vulnerability

No description provided by source. Script Name : Pluxml-blog Version : Pluxml-blog bêta 4.2 Bug Type : XSS vulnerability Found by : Metropolis Discovered : 17 December 2009 Download app : http://telechargements.pluxml.org/pluxml-blog-beta4-2.zip PoC : http://target/path/core/admin/auth.php?p=1Xss...

Pluxml-Blog 4.2 - '/core/admin/auth.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37384/info Pluxml-Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...