CVE-2008-5053

PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader comrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2008-5053

CVE-2008-5053 affects the Joomla! Simple RSS Reader (com_rssreader) 1.0. The vulnerability is a PHP remote file inclusion in admin.rssreader.php that allows an attacker to execute arbitrary PHP code by supplying a URL to mosConfig_live_site. The NVD entry lists a critical severity (CVSS v2: AV:N/...

Joomla Component Simple RSS Reader 1.0 RFI Vulnerability

No description provided by source. ================================================================================================================================ o Simple RSS Reader Component 1.0 Remote File Inclusion Vulnerability Software : comrssreader version 1.0 Vendor :...

Joomla Component Simple RSS Reader 1.0 RFI Vulnerability

Exploit for unknown platform in category web applications ======================================================== Joomla Component Simple RSS Reader 1.0 RFI Vulnerability ========================================================...

Joomla! Component Simple RSS Reader 1.0 - Remote File Inclusion

Joomla! Component Simple RSS Reader 1.0 - Remote File Inclusion ================================================================================================================================ o Simple RSS Reader Component 1.0 Remote File Inclusion Vulnerability Software : comrssreader version 1....

Joomla! Component Simple RSS Reader 1.0 - Remote File Inclusion

================================================================================================================================ o Simple RSS Reader Component 1.0 Remote File Inclusion Vulnerability Software : comrssreader version 1.0 Vendor : http://www.joomlashop.dk/ Download :...

joomlafeederator-rfi.txt

=================================================================================================================================================== o Feederator - RSS manager Component 1.0.5 Multiple Remote File Inclusion Vulnerabilities Software : comfeederator version 1.0.5 Vendor :...

Joomla Component Feederator 1.0.5 Multiple RFI Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Joomla Component Feederator 1.0.5 Multiple RFI Vulnerabilities ==============================================================...

Joomla! Component Feederator 1.0.5 - Multiple Remote File Inclusions

=================================================================================================================================================== o Feederator - RSS manager Component 1.0.5 Multiple Remote File Inclusion Vulnerabilities Software : comfeederator version 1.0.5 Vendor :...

CVE-2008-4753

SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...

Sql injection

SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...

CVE-2008-4753

CVE-2008-4753 : A SQL injection vulnerability exists in EditUrl.php of the AJ Square RSS Reader, exploitable via the url parameter to remotely execute arbitrary SQL commands. According to the NVD entry, the CVSS2 base score is 7.5 (high) with network attack vector, low attack complexity, and no a...

CVE-2008-4753

SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter...

Confluence administrators (who are not necessarily sys admins) can configure whitelist

A user who has the "Confluence Administrator" permission, but not necessarily the "System Administrator" permission, can configure the new URL whitelist for the HTML-include and RSS macros. Is this good enough, from a security point of view?...

Aj RSS Reader (EditUrl.php url) SQL Injection Vulnerability

No description provided by source. ===================================================SNAKES TEAM==================================================== + = = AJ Forced Matrix Script Remote SQL Injection Vulnerability + + = ==============================================:::ALGERIAN...

Aj RSS Reader - url SQL Injection

Aj RSS Reader - url SQL Injection ================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M...

WebSVN <= 2.0 (XSS/FH/CE) Multiple Remote Vulnerabilities

No description provided by source. WebSVN = 2.0 Multiple Vulnerabilities October 20, 2008 Vendor : Tim Armes URL : http://websvn.tigris.org Version : WebSVN = 2.0 Risk : Multiple Vulnerabilities Description: WebSVN is an online SVN repository viewer. The description taken from the project website...

Aj RSS Reader (EditUrl.php url) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Aj RSS Reader EditUrl.php url SQL Injection Vulnerability ===========================================================...

websvn-xssfhce.txt

WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...

Aj RSS Reader - 'url' SQL Injection

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...