EUVD-2011-1948

Malware in sbrugna...

EUVD-2007-2196

Malware in sbrugna...

EUVD-2011-1946

Malware in sbrugna...

EUVD-2011-1947

Malware in sbrugna...

Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability

No description provided by source. Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........:...

CVE-2011-1953

Multiple cross-site scripting XSS vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a 1 P, a 2 STRONG, a 3 A, a 4 EM, a 5 I, a 6 IMG, a 7 LI, an 8 OL, a 9 VIDEO, or a 10 BLOCKQUOTE element...

CVE-2011-1952

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service infinite loop via malformed HTML markup, as demonstrated by an a sequence...

CVE-2011-1954

Multiple cross-site request forgery CSRF vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to 1 ajax-weblog-guardar.php, 2 verpost.php, 3 comments.php, or 4 perfil.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a 1 P, a 2 STRONG, a 3 A, a 4 EM, a 5 I, a 6 IMG, a 7 LI, an 8 OL, a 9 VIDEO, or a 10 BLOCKQUOTE element...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to 1 ajax-weblog-guardar.php, 2 verpost.php, 3 comments.php, or 4 perfil.php...

CVE-2011-1952

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service infinite loop via malformed HTML markup, as demonstrated by an a sequence...

CVE-2011-1953

CVE-2011-1953 affects Post Revolution prior to 0.8.0c-2. The vuln is a set of XSS flaws in common.php (allowed tags: p, a, strong, em, i, img, li, ol, video, blockquote) that do not sanitize attributes, enabling arbitrary script via tag attributes. A DoS path exists in a loop when removing non-pe...

CVE-2011-1952

CVE-2011-1952 affects Post Revolution up to version 0.8.0c. The DoS arises from a faulty loop in common.php when stripping non-permitted HTML: an attacker can trigger an infinite loop by posting crafted HTML (e.g., a

CVE-2011-1954

Post Revolution 0.8.0c and earlier is affected by CSRF in multiple endpoints (ajax-weblog-guardar.php, verpost.php, comments.php, perfil.php), enabling remote attackers to hijack user sessions. The vulnerability is described consistently across CVE-2011-1954 entries; the root cause is inadequate ...

CVE-2011-1954

Multiple cross-site request forgery CSRF vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to 1 ajax-weblog-guardar.php, 2 verpost.php, 3 comments.php, or 4 perfil.php...

PT-2011-3496

Name of the Vulnerable Software and Affected Versions Post Revolution versions prior to 0.8.0c-2 Description The issue allows remote attackers to inject arbitrary web script or HTML via attributes of various HTML elements, including P, STRONG, A, EM, I, IMG, LI, OL, VIDEO, and BLOCKQUOTE...

PT-2011-3497

Name of the Vulnerable Software and Affected Versions Post Revolution versions 0.8.0c-2 and earlier Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests to specific API endpoints, including "ajax-weblog-guardar.php", "verpost.php",...

CVE-2011-1953: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a 1 P, a 2 STRONG, a 3 A, a 4 EM, a 5 I, a 6 IMG, a 7 LI, an 8 OL, a 9 VIDEO, or a 10 BLOCKQUOTE element...

CVE-2011-1954: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to 1 ajax-weblog-guardar.php, 2 verpost.php, 3 comments.php, or 4 perfil.php...

CVE-2011-1952: Undefined Security Weakness

common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service infinite loop via malformed HTML markup, as demonstrated by an a sequence...