3422 matches found
CVE-2009-1678
Bitweaver prior to version 2.7 is affected by a directory traversal flaw in the saveFeed function of rss/feedcreator.class.php, where a crafted .. in the version parameter to boards/boards_rss.php allows remote attackers to create or overwrite arbitrary files. This impacts Bitweaver 2.6 and earli...
MagpieRSS Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -= MagpieRSS Multiple XSS Vulnerabilities =- May 6, 2009 Author: Justin C. Klein Keane Software: MagpieRSS http://magpierss.sourceforge.net/ Version Tested: magpierss-0.72 Vendor notified Full details can also be found at...
Merak邮件服务器RSS源阅读器跨站脚本漏洞
BUGTRAQ ID: 34825 CVECAN ID: CVE-2009-1467 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak邮件服务器的WebMail用户可以向其文件夹列表中添加RSS源作为文件夹，这些源是由html/webmail/server/inc /rss/rss.php文件解析的，并在html/webmail/server/inc/rss/item.php文件中处理RSS channel中的每个item元素。...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in...
CVE-2009-1467
Multiple cross-site scripting XSS vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in...
[RT-SA-2009-002] IceWarp WebMail Server: User-assisted Cross Site Scripting in RSS Feed Reader
Advisory: IceWarp WebMail Server: User-assisted Cross Site Scripting in RSS Feed Reader During a penetration test, RedTeam Pentesting discovered that the IceWarp WebMail Server is prone to user-assisted Cross Site Scripting attacks in its RSS feed reader. If attackers control or compromise an RSS...
IceWarp WebMail RSS Feed XSS
Advisory: IceWarp WebMail Server: User-assisted Cross Site Scripting in RSS Feed Reader During a penetration test, RedTeam Pentesting discovered that the IceWarp WebMail Server is prone to user-assisted Cross Site Scripting attacks in its RSS feed reader. If attackers control or compromise an RSS...
[SECURITY] Fedora 10 Update: blam-1.8.5-10.fc10
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-11.fc9
This is an evolution plugin which enables evolution to read rss feeds...
[SECURITY] Fedora 9 Update: blam-1.8.5-9.fc9.1
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
[SECURITY] Fedora 10 Update: blam-1.8.5-9.fc10
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : cups, cupsys vulnerabilities (USN-707-1)
It was discovered that CUPS didn't properly handle adding a large number of RSS subscriptions. A local user could exploit this and cause CUPS to crash, leading to a denial of service. This issue only applied to Ubuntu 7.10, 8.04 LTS and 8.10. CVE-2008-5183 It was discovered that CUPS did not...
[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-10.fc9
This is an evolution plugin which enables evolution to read rss feeds...
[SECURITY] Fedora 9 Update: blam-1.8.5-8.fc9.1
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...
Cross site scripting
Cross-site scripting XSS vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
CVE-2008-6570
Cross-site scripting XSS vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
CVE-2008-6570
Cross-site scripting XSS vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
CVE-2008-6570
CVE-2008-6570 describes an XSS vulnerability in Cybozu Garoon’s RSS reader (versions 2.0.0–2.1.3). A crafted RSS feed could inject arbitrary JavaScript/HTML, potentially executing in the victim’s browser. Root cause: insufficient sanitization/unescaped content in RSS feed handling. Impact is user...
[SECURITY] Fedora 9 Update: blam-1.8.5-7.fc9.1
Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...