2725 matches found
Oracle Linux 5 : kernel (ELSA-2011-0927)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0927 advisory. - Revert: xen hvm: svm support cleanups Andrew Jones 703715 702657 CVE-2011-1780 - Revert: xen hvm: secure svmcraccess Andrew Jones 703715 702657...
CVE-2013-4745
SQL injection vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-4746
Cross-site scripting XSS vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Sql injection
SQL injection vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4746
CVE-2013-4746 is an XSS vulnerability in the TYPO3 extension My quiz and poll (myquizpoll) prior to version 2.0.6. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. The entry relates to TYPO3 extension before 2.0.6 and is documented with a MEDIUM impact (C/N I/P). ...
CVE-2013-4745: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-4746: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2013-5173
Name of the Vulnerable Software and Affected Versions TYPO3 My quiz and poll myquizpoll extension versions prior to 2.0.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 2.0.6, update to...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 8527)
This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. The following security issues have been fixed : - A race condition in ptrace2 could be used by local attackers to crash the kernel and/or execute code in kernel context. CVE-2013-0871 - Avo...
WordPress Simply Poll Plugin 1.4.1 - Multiple Vulnerabilities
Simply Poll plugin is prone to a cross-site scripting and CSRF vulnerabilities. Solution After a email to [email protected], Simply Poll plugin was deleted...
WordPress Simply Poll Plugin 1.4.1 - Multiple Vulnerabilities
Simply Poll plugin is prone to a cross-site scripting and CSRF vulnerabilities. Solution After a email to [email protected], Simply Poll plugin was deleted...
WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities
WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/...
WordPress Simply Poll 1.4.1 CSRF / XSS
Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/ Software Link:...
WordPress Simply Poll Plugin 1.4.1 - CSRF / XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/ Software...
WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities
Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/ Software Link:...
WordPress Poll Plugin 'poll_id' Parameter SQL Injection
The WordPress Poll Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'pollid' parameter of the 'wp-admin/admin-ajax.php' script. An unauthenticated, remote attacker can leverage this issue to launch a...
MTP Poll 1.0 - Multiple Cross-Site Scripting Vulnerabilities
MTP Poll 1.0 - Multiple Cross-Site Scripting Vulnerabilities MTP Poll 1.0 Multiple Remote Script Insertion Vulnerabilities alert1;' / alert2;' / input...