6302 matches found
Wordpress Email newsletter 20.9 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress Email newsletter 20.9 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/email-newsletter/ Software Link :...
Cross-site scripting vulnerability
A cross-site scripting vulnerability exists in the web-based device management interface whereby data provided by the user is echoed back to the user without sanitization. Ref 64563. This vulnerability has been assigned CVE-2014-3764. This issue affects the management interface of the device, whe...
PT-2016-02: Cross-Site Scripting in Advantech WebAccess
The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Advantech WebAccess. A Cross-site scripting XSS vulnerability exists in Advantech WebAccess before 8.1 when the web server does not properly filter user input, which allows remote authenticated...
Server: CSRF in "bookmarks" application
Due to not verifying the CSRF token on the import functionality of the "bookmarks" application, it was vulnerable against CSRF attacks. The "bookmarks" application is disabled by default. An unauthenticated attacker could have used this to import bookmarks into the "bookmarks" application if the...
CVE-2014-8578
Cross-site scripting XSS vulnerability in the Groups panel in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475...
freshfiction.com XSS vulnerability
Open Bug Bounty ID: OBB-46671 Description| Value ---|--- Affected Website:| freshfiction.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
WordPress Social Connect Plugin <= 1.0.4 XSS Vulnerability - Active Check
WordPress Social Connect Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4537
CVE-2014-4537 affects WordPress Keyword Strategy Internal Links Plugin (
2z Project 0.9.5 Rating.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24122/info 2z Project is prone to a cross-site scripting vulnerability. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected...
Microsoft Outlook 98/2000/2002 Unauthorized Email Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3025/info Microsoft Outlook introduces a vulnerability that may allow attackers to access and manipulate user email. The vulnerability is due to a new ActiveX control called 'Microsoft Outlook View Control'. The flaw is...
Dev Web Manager System 1.5 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20590/info DEV Web Manager System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute i...
MyShoutPro 1.2 Final - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : MyShoutPro v1.2 Final Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi ...
Slackware Linux /usr/bin/ppp-off Insecure /tmp Call Exploit
No description provided by source. !/bin/sh In SlackWare Linux the script /usr/bin/ppp-off writes the output of 'ps x' to /tmp/grep.tmp. Since root is the user that runs ppp-off, a non-privileged user could create a link from /tmp/grep.tmp to any fileie: /etc/issue, thus when root runs the ppp-of...
XGB Guestbook 1.2 User-Embedded Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4513/info xGB is guestbook software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. xGB allows users to post images in guestbook entries by using special...
Uapplication Ublog Reload 1.0.5 Trackback.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13994/info Ublog Reload is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
DevBB 1.0 Member.PHP Cross-Site Scripting Vulnerability
No description provided by source...
CoolPHP Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18124/info CoolPHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
MF Piadas 1.0 Admin.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18676/info MF Piadas is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...
Microsoft Internet Explorer 5 Shell: IFrame Cross-Zone Scripting Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Computer Zone. This issue is related to ho...