Nameko - nameko.php Cross-Site Scripting

Nameko - nameko.php Cross-Site Scripting source: https://www.securityfocus.com/bid/60853/info Nameko is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...

FtpLocate - HTML Injection

source: https://www.securityfocus.com/bid/60760/info FtpLocate is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially...

Joomla! Component com_rokdownloads - Arbitrary File Upload

Joomla! Component comrokdownloads - Arbitrary File Upload source: https://www.securityfocus.com/bid/60690/info The RokDownloads component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

TaxiMonger for Android - 'name' HTML Injection

source: https://www.securityfocus.com/bid/60566/info TaxiMonger for Android is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...

WordPress Theme Ambience - src Cross-Site Scripting

WordPress Theme Ambience - src Cross-Site Scripting source: https://www.securityfocus.com/bid/60458/info The Ambience theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Caucho Resin - '/resin-admin/' URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info Resin Professional is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

WordPress Plugin ADIF Log Search Widget - logbook_search.php Cross-Site Scripting

WordPress Plugin ADIF Log Search Widget - logbooksearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/60198/info ADIF Log Search widget plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker...

WordPress Plugin ADIF Log Search Widget - 'logbook_search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/60198/info ADIF Log Search widget plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Acme thttpd HTTP Server - Directory Traversal

source: https://www.securityfocus.com/bid/60010/info thttpd is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the web server. Information...

WordPress Plugin wp-FileManager - path Arbitrary File Download

WordPress Plugin wp-FileManager - path Arbitrary File Download source: https://www.securityfocus.com/bid/59886/info The wp-FileManager plugin for WordPress is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently sanitize user-supplied...

Joomla Jnews 8.0.1 Cross Site Scripting Vulnerability

Joomla Jnews version 8.0.1 suffers from an Open Flash-Chart cross site scripting vulnerability. Exploit Title: Joomla comjnews Open Flash-Chart XSS Release Date: 14/05/2013 Author: Deepankar Arora And Rafay Baloch Blog: http://rafayhackingarticles.net Vendor: www.joobi.co Versions Affected:...

Joomla Jnews 8.0.1 Cross Site Scripting

Exploit Title: Joomla comjnews Open Flash-Chart XSS Release Date: 14/05/2013 Author: Deepankar Arora And Rafay Baloch Blog: http://rafayhackingarticles.net Vendor: www.joobi.co Versions Affected: 8.0.1latest and earlier Google Dork: inurl:comjnews Description: The vulnerability with Open-Flash...

Open Flash Chart - get-data Cross-Site Scripting

Open Flash Chart - get-data Cross-Site Scripting source: https://www.securityfocus.com/bid/59928/info Open Flash Chart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code i...

Joomla Phocagallery 3.0.0 / 4.0.0 Cross Site Scripting

Exploit Title: Joomla comphocagallery Plupload Flash XSS Release Date: 13/05/2013 Author: Rafay Baloch And Deepankar Arora Contact: http://rafayhackingarticles.net Vendor: phoca.cz Versions Affected: 3.0.0 - 4.0.0 Google Dork: inurl:comphocagallery Description: The vulnerability with plupload wit...

e107 content_preset.php URI XSS

The version of e107 installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input passed in the URI to the 'contentpreset.php' script. An attacker may be able to leverage this to inject arbitrary HTML and script code into a user'...

WordPress Plugin Securimage-WP - siwp_test.php Cross-Site Scripting

WordPress Plugin Securimage-WP - siwptest.php Cross-Site Scripting source: https://www.securityfocus.com/bid/59816/info The Securimage-WP plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

NetApp OnCommand System Manager - zapiServlet CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities

NetApp OnCommand System Manager - zapiServlet CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/59688/info NetApp OnCommand System Manager is prone to multiple cross-site scripting and HTML-injection vulnerabilities...

Crafty Syntax Live Help 3.1.2 - Remote File Inclusion Full Path Disclosure

Crafty Syntax Live Help 3.1.2 - Remote File Inclusion Full Path Disclosure source: https://www.securityfocus.com/bid/59322/info Crafty Syntax Live Help is prone to a remote file-include vulnerability and a path-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input...

Fork CMS - 'js.php' Local File Inclusion

source: https://www.securityfocus.com/bid/59298/info Fork CMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the web server process...

FreeBSD : rubygem-rails -- multiple vulnerabilities (db0c4b00-a24c-11e2-9601-000d601460a4)

Ruby on Rails team reports : Rails versions 3.2.13 has been released. This release contains important security fixes. It is recommended users upgrade as soon as possible. Four vulnerabilities have been discovered and fixed : - CVE-2013-1854 Symbol DoS vulnerability in Active Record - CVE-2013-185...