(0Day) Wecon PLC Editor plcdatacenter projectVersion Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Wecon PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2012-1019: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 XWiki.XWikiCommentscomment parameter to xwiki/bin/commentadd/Main/WebHome, 2 XWiki.XWikiUsers0company parameter when editing a user profile, or 3...

PT-2012-3018

Name of the Vulnerable Software and Affected Versions XWiki Enterprise version 3.4 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the XWiki.XWikiComments comment parameter to "xwiki/bin/commentadd/Main/WebHome", the XWiki.XWikiUsers ...