CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

wordpress -- multiple vulnerabilities

secunia reports: The security issue is caused due to the wpcheckfiletype function in /wp-includes/functions.php improperly validating uploaded files. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script with multiple extensions. Successful exploitation of this...

WordPress <= 2.8.5 - XSS

Because of this vulnerability in wp-admin/press-this.php, authenticated users can inject arbitrary web script or HTML via the "s" parameter. Solution Update WordPress...

Joomla Press Release SQL Injection

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Joomla Component compressrelease id SQL Injection Vulnerability Discovered By : Moudi Contact : Download : OFF Greetings : Mizoz, Zuka,...

MDVA-2008:165 : gnome-power-manager

Some button press events where handled two times because they were reported both by X and by Hal. This update adds some code to detect them and ignore the duplicate events. This update also adds a gconf key /schemas/apps/gnome-power-manager/general/logoutcommand to allow using gnome-power-manager...

Go for simple flower instructions the IDC scripting-vulnerability warning-the black bar safety net

Find hand modified flower instructions too boring,so simple to learn under the IDC,feel unhappy,but in order to a little to save some physical strength,or bite the bullet and wrote one,there may be a bug,can change the flower instructions are also very limited,I only in order to cope with I came...

Unfixed XSS vulnerability at www.commoncouragepress.com

Security researcher Mystick, has submitted on 02/05/2009 a cross-site-scripting XSS vulnerability affecting www.commoncouragepress.com, which at the time of submission ranked 7592250 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. I...

wan-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear --- Eliminator and to...

WordPress 'press-this.php'多个跨站脚本漏洞

BUGTRAQ ID: 30238 CNCAN ID：CNCAN-2008071709 WordPress是一款流行的博客应用程序。 WordPress 'press-this.php'存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是'press-this.php'对多个字段缺少过滤，构建恶意脚本代码作为参数数据，并诱使用户访问，可导致恶意脚本代码在目标浏览器中执行，泄漏敏感信息。 WordPress WordPress 2.5.1 WordPress WordPress 2.3.3 WordPress WordPress 2.3.2 WordPress...

CVE-2008-1246

The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties,...

Unfixed XSS vulnerability at www.creativelearningpress.com

Security researcher skathgh420, has submitted on 02/07/2008 a cross-site-scripting XSS vulnerability affecting www.creativelearningpress.com, which at the time of submission ranked 10704379 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Ray Chi, a press release management system v3. 0 vulnerability is very simple. - Vulnerability warning-the black bar safety net

Ray Chi, a press release management system v3. 0 vulnerability is very simple. I just watched the two most direct vulnerability. Transferred from:bct The first is to get the Administrator's password and username. it. In the http://127.0.0.1/otype. asp? owen1=sports news Plus following a period of...

Mozilla Firefox focus spoofing

It's possible to spoof the focus of key press events...

CVE-2007-2554

Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...

CVE-2007-2554

Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...

CVE-2007-2554: Undefined Security Weakness

Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...

Word Press Sensitive Directory exposure &#40;SQL&#41;

Found By: r00tati Web App: Word Press Versions: unknown Level: low File Name: admin-functions.php //SQL EXAMPLE ERROR: Fatal error: Call to undefined function in /usr/local/www//data/wp-admin/admin-functions.php on line 1593 Thanks, r00t...

CVE-2006-3485

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php...