EUVD-2012-0080

Malware in sbrugna...

PT-2024-40468 · Unknown · Simplesamlphp

Name of the Vulnerable Software and Affected Versions: SimpleSAMLphp versions prior to 1.14.4 Description: The issue allows attackers to display links targeting a malicious website inside a trusted site running SimpleSAMLphp, due to the lack of security checks involving the link href and retryURL...

WS-2020-0009

The following scripts were not checking the URLs obtained via the HTTP request before displaying them as the target of links that the user may click on: - "www/logout.php" - "modules/core/www/nocookie.php" The issue allowed attackers to display links targeting a malicious website inside a trusted...

PT-2020-20969

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.14.4 Description The issue concerns several scripts in SimpleSAMLphp that display web pages with links obtained from request parameters, enhancing usability by presenting users with links to follow after...

CVE-2012-0040

Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...

CVE-2012-0040

Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...

CVE-2012-0040

Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...

CVE-2012-0040: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/core/www/nocookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter...

PT-2012-2258

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.8.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter in the modules/core/www/no cookie.php file. Recommendations For versio...