64 matches found
ri-okna.sk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1135637 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ri-okna.sk website and its...
WordPress Antena_Ri Institute Themes Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress AntenaRi Institute Themes. An attacker can successfully initiate a phishin...
CVE-2018-10080
Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52esFRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wandns.asp request in conjunction with a crafted admin cookie...
ri-photo.com XSS vulnerability
Open Bug Bounty ID: OBB-48424 Description| Value ---|--- Affected Website:| ri-photo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
RI Blog 1.3 Search.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21880/info RI Blog is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...
[SECURITY] Fedora 17 Update: rubygem-rdoc-3.12-5.fc17
RDoc produces HTML and command-line documentation for Ruby projects. RDoc includes the +rdoc+ and +ri+ tools for generating and displaying online documentation. See RDoc for a description of RDoc's markup and basic use...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 161564 High CVE-2012-5138: Incorrect file path handling. Credit to Google Chrome Security Team Jüri Aedla. 162835 High CVE-2012-5137: Use-after-free in media source handling. Credit to Pinkie Pie...
CVE-2003-1573: Improper Neutralization of Special Elements used in an SQL Command
The PointBase 4.6 database component in the J2EE 1.4 reference implementation J2EE/RI allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun...
Unfixed XSS vulnerability at www.gpa-ri.com.br
Security researcher mygotmanoel, has submitted on 08/01/2008 a cross-site-scripting XSS vulnerability affecting www.gpa-ri.com.br, which at the time of submission ranked 1937699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/02/2008. It is...
CVE-2007-1240
CVE-2007-1240 involves multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) searchkey to index.php, and (2) sn or (3) ri to modules/htmlframechat/index.php. The d...
CVE-2007-1240: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the searchkey parameter to index.php, or the 2 sn or 3 ri parameter to modules/htmlframechat/index.php. NOTE: the provenance of this information ...
CVE-2007-0121
Cross-site scripting XSS vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2007-0121
Cross-site scripting XSS vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2007-0121
CVE-2007-0121 is an XSS vulnerability in RI Blog 1.3 (search.asp) that allows remote attackers to inject arbitrary script/HTML via the q parameter. Public records cite a CVSS v2 base score of 6.8 (Medium), with network attack vector and partial impact to confidentiality, integrity, and availabili...
CVE-2007-0121: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
riblog-xss.txt
BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : RI Blog 1.3 Script Download : http://www.aspindir.com/indir.asp?id=4098 Risk : High Found By : ShaFuck31 Vulnerable file : search.asp Vulnerable : http://www.victim.com/BlogPath/search.asp?q=XSS ExampLe :...
RI Blog 1.3 XSS Vuln.
BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : RI Blog 1.3 Script Download : http://www.aspindir.com/indir.asp?id=4098 Risk : High Found By : ShaFuck31 Vulnerable file : search.asp Vulnerable : http://www.victim.com/BlogPath/search.asp?q=XSS ExampLe :...
RI Blog 1.3 - 'search.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21880/info RI Blog is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user...
