CVE-2013-0225

The CVE-2013-0225 entry concerns the Drupal User Relationships contributed module, not Drupal core. Affected versions are 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5. The root cause is insufficient escaping of the relationship name, allowing remote authenticated users with the "admin...

CVE-2013-0225

Cross-site scripting XSS vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5 for Drupal allows remote authenticated users with the "administer user relationships" permission to inject arbitrary web script or HTML via a relationship name...

CVE-2013-0225

Cross-site scripting XSS vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5 for Drupal allows remote authenticated users with the "administer user relationships" permission to inject arbitrary web script or HTML via a relationship name...

PT-2013-2168

Name of the Vulnerable Software and Affected Versions Drupal User Relationships module versions 6.x-1.x before 6.x-1.4 Drupal User Relationships module versions 7.x-1.x before 7.x-1.0-alpha5 Description A cross-site scripting XSS issue exists in the User Relationships module for Drupal, allowing...

CVE-2013-0225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5 for Drupal allows remote authenticated users with the "administer user relationships" permission to inject arbitrary web script or HTML via a relationship name...

SA-CONTRIB-2013-007 User Relationships - Cross Site Scripting (XSS)

The User Relationships module allows you to create multiple relationship types and maintain relationships between users in your Drupal site. The module does not sufficiently escape relationship names before display. This allows users with the correct permissions to create relationship names...

Coalfire Expands Dallas Office and Names Kurt Hagerman Managing Director

I am pleased to announce that our Dallas office is growing by leaps and bounds. Leading the charge is Kurt Hagerman, the newly appointed managing director. Kurt will serve more than 60 clients in the Southwest region and oversee Coalfires strategic vision while building new client relationships f...

QuickRecon v0.3.1 - Latest Version Download

QuickRecon v0.3.1 - Latest Version Download QuickRecon is a simple information gathering tool that allows you to: find subdomain names, perform zone transfer, gather emails and find human relationships using microformats. It is a simple information gathering utility based on Qt4 toolkit. Download...

Has Microsoft Become Complacent on Security?

Things are getting curioser and curioser of late at Microsoft. The company is no longer the punch line for every joke in the IT security industry, but now the lessons the company learned in the last 10 years about dealing with researchers and making product security a priority are falling by the...

Design/Logic Flaw

IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields, which allows remote authenticated users to interfere with intended record relationships, and possibly cause a denial of service loop or have...

CVE-2010-4603

IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields, which allows remote authenticated users to interfere with intended record relationships, and possibly cause a denial of service loop or have...

PT-2010-5569

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.0.x through 7.0.1.10 IBM Rational ClearQuest versions 7.1.1.x through 7.1.1.3 IBM Rational ClearQuest versions 7.1.2.x through 7.1.2.0 Description The issue allows remote authenticated users to interfere with...

Overlooked Old Vulnerabilities Lead to Major Data Breaches, Says TrustWave

A recent report suggests that focusing too much on new security threats might make companies overlook older, more commonly exploited vulnerabilities. The report by TrustWave is based on data from over 1,900 penetration tests and more than 200 data breach investigations for clients like American...

MDVA-2009:201 : samba

This is a maintenance and bugfix release of samba 3.3.x. Major enhancements in Samba 3.3.9 include: o Fix trust relationships to windows 2008 2008 r2 bug 6711. o Fix file corruption using smbclient with NT4 server bug 6606. o Fix Windows 7 share access which defaults to NTLMv2 bug 6680. o Fix SAM...

Microsoft SharePoint Cross Site Scripting Vulnerability

This host is running Microsoft SharePoint Server and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmssharepointxssvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft SharePoint Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 20...

Microsoft SharePoint <= 12.0.0.6421 XSS Vulnerability

Microsoft SharePoint Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: While onl...

Cross site scripting

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

CVE-2009-1563

CVE-2009-0689 is the active vulnerability; CVE-2009-1563 is a duplicate. Connected advisories show this flaw affects multiple projects via a boundary/array-index condition in floating-point conversion code (e.g., Mono’s string-to-double parser) that may crash and, in some contexts, allow arbitrar...

When Trusting Your Own Code is a Bad Idea

From Zero in a Bit Tyler Shields Trust has long been a favorite target of malicious individuals. Most people would say that proper management of trust is one of the primary cornerstones of information security. Trust is a relative term and all trust relationships should be examined with a very...

Online Ad Sales Open Door to Viruses

From The Wall Street Journal Emily Steel On a Saturday night at the end of May, visitors to the forums section of Digital Spy, a British entertainment and media news Web site, were greeted with an ad that loaded malicious software onto their computers. The Web site’s advertising system had been...