3058 matches found
Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities
Title: ====== Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=700 VL-ID: ===== 700 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: =============...
CVE-2012-5384
Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...
PhpTax - 'pfilez' Execution Remote Code Injection (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "PhpTax pfilez...
PhpTax pfilez Parameter Exec Remote Code Injection
Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Cross site scripting
Cross-site scripting XSS vulnerability in the Quickl Form component for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-4892
Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 titleen, 2 summaryen, or 3 bodyen parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890. NOTE...
eFront Enterprise v3.6.11 - Multiple Web Vulnerabilities
Title: ====== eFront Enterprise v3.6.11 - Multiple Web Vulnerabilities Date: ===== 2012-08-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=668 VL-ID: ===== 668 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...
eFront Educational 3.6.11 Cross Site Scripting
Title: ====== eFront Educational v3.6.11 - Multiple Web Vulnerabilities Date: ===== 2012-08-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=666 VL-ID: ===== 666 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...
CVE-2012-4744
CVE-2012-4744 describes a Cross-site scripting (XSS) vulnerability in ssearch.php of the Siche search module 0.5 for Zeroboard. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter. The NVD entry lists a CVSSv2 base score of 4.3 (Medium) with n...
DEBIAN-CVE-2012-2582
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or...
CVE-2012-2687
Multiple cross-site scripting XSS vulnerabilities in the makevariantlist function in modnegotiation.c in the modnegotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted...
CVE-2012-4263
Cross-site scripting XSS vulnerability in inc/admin/content.php in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPUSERAGENT header...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263...
CVE-2012-4267
CVE-2012-4267 describes a stored/persistent XSS in Sockso’s user/register endpoint for Sockso 1.5 and earlier, where an attacker can inject arbitrary script or HTML via the name parameter. The affected component is the registration flow (user/register) in Sockso prior to version 1.6, with the roo...
CVE-2012-3464
Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' quote character...
CVE-2012-3413
CVE-2012-3413 affects KDE PIM (kdepim) 4.6–4.8 where HTMLQuoteColorer::process does not disable JavaScript, Java, and browser plugins in HTML mail, enabling remote code or HTML injection via crafted emails. Connected advisories indicate a remediation: the Fedora update (FEDORA-2012-10411) patches...
CVE-2012-2022
HP NNMi (Network Node Manager i) vulnerable to remote cross-site scripting (XSS) in NNMi 8.x and 9.x (9.0x, 9.1x, 9.20). The CVE-2012-2022 entry documents unspecified vectors that could allow an attacker to inject web script or HTML via the NNMi web interface. The security bulletin notes the vuln...
CVE-2012-3848
CVE-2012-3848 affects Plixer Scrutinizer (Dell SonicWALL Scrutinizer) prior to 9.5.0. The vulnerability class is Cross-Site Scripting (XSS) in the web console, exploitable via the d4d/exporters.php (query string and Referer header) and d4d/contextMenu.php inputs, allowing remote attackers to inje...
CVE-2012-3393
CVE-2012-3393 is an XSS vulnerability in Moodle via repository/lib.php, exploitable by remote authenticated administrators who rename a repository. Affected versions are Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4. The underlying flaw allows injection of arbitrary web script/HTML by tamperin...