Lucene search
K

30 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

PHP Multi User Randomizer 2006.09.13 Configure_Plugin.TPL.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23917/info PHP Multi User Randomizer is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

7.1AI score
Exploits0
NVD
NVD
added 2010/01/12 5:30 p.m.15 views

CVE-2009-4602

Cross-site scripting XSS vulnerability in the Randomizer module 5.x through 5.x-1.0 and 6.x through 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.7AI score0.01022EPSS
Exploits0References3
Cvelist
Cvelist
added 2010/01/12 5:0 p.m.18 views

CVE-2009-4602

Cross-site scripting XSS vulnerability in the Randomizer module 5.x through 5.x-1.0 and 6.x through 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.01022EPSS
Exploits0References3
CVE
CVE
added 2010/01/12 5:0 p.m.48 views

CVE-2009-4602

The CVE-2009-4602 entry describes a Cross-site scripting (XSS) vulnerability in the Drupal Randomizer module (5.x through 5.x-1.0 and 6.x through 6.x-1.0). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: Randomizer module for D...

4.3CVSS5.9AI score0.01022EPSS
Exploits0References3Affected Software1
Drupal
Drupal
added 2009/12/09 12:0 a.m.15 views

SA-CONTRIB-2009-111 - Randomizer - Cross Site Scripting

The Randomizer module assists researchers and students who want an easy way to perform random sampling or assign participants to experimental conditions. It accepts form input as parameters for generating a pseudo-random list of numbers. The module does not sanitize some of the user-supplied data...

6.3AI score
Exploits0References4
Prion
Prion
added 2007/05/13 11:19 p.m.11 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Multi User Randomizer phpMUR 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via 1 the editplugin parameter to configureplugin.tpl.php, or 2 certain array parameters to web/phpinfo.php, as demonstrated by 1 or a...

6.8CVSS6.2AI score0.0399EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2007/05/13 11:19 p.m.18 views

CVE-2007-2632

Multiple cross-site scripting XSS vulnerabilities in PHP Multi User Randomizer phpMUR 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via 1 the editplugin parameter to configureplugin.tpl.php, or 2 certain array parameters to web/phpinfo.php, as demonstrated by 1 or a...

6.8CVSS5.9AI score0.0399EPSS
Exploits0References6
Cvelist
Cvelist
added 2007/05/13 11:0 p.m.25 views

CVE-2007-2632

Multiple cross-site scripting XSS vulnerabilities in PHP Multi User Randomizer phpMUR 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via 1 the editplugin parameter to configureplugin.tpl.php, or 2 certain array parameters to web/phpinfo.php, as demonstrated by 1 or a...

5.9AI score0.0399EPSS
Exploits0References6
exploitpack
exploitpack
added 2007/05/10 12:0 a.m.12 views

PHP Multi User Randomizer 2006.09.13 - Configure_Plugin.TPL.php Cross-Site Scripting

PHP Multi User Randomizer 2006.09.13 - ConfigurePlugin.TPL.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23917/info PHP Multi User Randomizer is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker m...

Exploits0
Exploit DB
Exploit DB
added 2007/05/10 12:0 a.m.30 views

PHP Multi User Randomizer 2006.09.13 - 'Configure_Plugin.TPL.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23917/info PHP Multi User Randomizer is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

7.4AI score
Exploits0
Rows per page
Query Builder