155 matches found
Sql injection
SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...
CVE-2008-4753
SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...
CVE-2008-4753
CVE-2008-4753 : A SQL injection vulnerability exists in EditUrl.php of the AJ Square RSS Reader, exploitable via the url parameter to remotely execute arbitrary SQL commands. According to the NVD entry, the CVSS2 base score is 7.5 (high) with network attack vector, low attack complexity, and no a...
CVE-2008-4753: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...
Aj RSS Reader (EditUrl.php url) SQL Injection Vulnerability
No description provided by source. ===================================================SNAKES TEAM==================================================== + = = AJ Forced Matrix Script Remote SQL Injection Vulnerability + + = ==============================================:::ALGERIAN...
Aj RSS Reader - 'url' SQL Injection
================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...
Aj RSS Reader (EditUrl.php url) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== Aj RSS Reader EditUrl.php url SQL Injection Vulnerability ===========================================================...
Aj RSS Reader - url SQL Injection
Aj RSS Reader - url SQL Injection ================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M...
[SECURITY] Fedora 7 Update: centerim-4.22.4-1.fc7.1
CenterIM is a text mode menu- and window-driven IM interface that supports the ICQ2000, Yahoo!, MSN, AIM TOC, IRC, Gadu-Gadu and Jabber protocols. Internal RSS reader and a client for LiveJournal are provided...
[SECURITY] Fedora 8 Update: centerim-4.22.4-1.fc8
CenterIM is a text mode menu- and window-driven IM interface that supports the ICQ2000, Yahoo!, MSN, AIM TOC, IRC, Gadu-Gadu and Jabber protocols. Internal RSS reader and a client for LiveJournal are provided...
yarssr RSS reader shell characters vulnerability
No description provided...
Remote file inclusion
PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader comwmtrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...
CVE-2007-5410
PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader comwmtrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...
CVE-2007-5410
CVE-2007-5410 affects the Joomla! component com_wmtrssreader (admin.wmtrssreader.php) in the webmaster-tips.net Flash RSS Reader 1.0. The vulnerability is a PHP remote file inclusion that allows an attacker to supply a URL via mosConfig_live_site to cause remote code execution. The connected docu...
CVE-2007-5410: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader comwmtrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...
[SECURITY] Fedora 7 Update: liferea-1.2.19-3.fc7
Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...
JVN#36628264 Lunascape RSS reader arbitrary script execution vulnerability
Impact Arbitrary JavaScript could be executed within Lunascape's RSS reader. Solution Products Affected Lunascape 4.1.3 build 2 and earlier...
Wizz RSS Reader Mozilla plugin crossite scripting
Crossite scripting with RSS feeds...
CVE-2007-2060
Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM...
CVE-2007-2060
CVE-2007-2060 affects the Wizz RSS Reader Firefox extension (pre-2.1.9). A cross-zone scripting flaw allows remote attackers to run arbitrary JavaScript in the browser chrome via the RSS feed DOM, enabling potential remote code execution in the user’s browser UI. The vulnerability is described ac...