Easy Media Download < 1.1.7 - Contributor+ Stored Cross-Site Scripting

The plugin does not escape the text argument of its shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. PoC Affected argument: url, text, target, rel and class easymediadownload url="/" text='" onerror="alert/XSS///http'...

Code injection

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

CVE-2007-6679

CVE-2007-6679 affects IBM WebSphere Application Server 6.1 before Fix Pack 13, with an unspecified vulnerability in the Administrative Console related to monitor role users. Connected sources indicate additional impact on WebSphere 6.0.x before Fix Pack 25 and list multiple vulnerabilities in 6.1...