23 matches found
EUVD-2014-3467
Malware in sbrugna...
EUVD-2014-3466
Malware in sbrugna...
EUVD-2015-6669
Malware in sbrugna...
EUVD-2015-6670
Malware in sbrugna...
CVE-2014-3455
Multiple cross-site request forgery CSRF vulnerabilities in the 1 CreateProperty, 2 CreateTemplate, 3 CreateForm, and 4 CreateClass special pages in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allow remote attackers to hijack the...
CVE-2014-3454
Cross-site request forgery CSRF vulnerability in Special:CreateCategory in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to hijack the authentication of users for requests that create categories via unspecified vecto...
MediaWiki SemanticForms Extended Cross-Site Scripting Vulnerability (CNVD-2015-05872 (CNVD-C-2015-47230))
MediaWiki is the United States Wikimedia Wikimedia Foundation and MediaWiki volunteers to develop and maintain a set of free and free Web-based Wiki engine , it can be used to deploy internal knowledge management and content management system . SemanticForms is one of the extensions used to creat...
MediaWiki SemanticForms extension cross-site scripting vulnerability (CNVD-2015-05873)
MediaWiki is the United States Wikimedia Wikimedia Foundation and MediaWiki volunteers to develop and maintain a set of free and free Web-based Wiki engine , it can be used to deploy internal knowledge management and content management system . SemanticForms is one of the extensions used to creat...
CVE-2015-6732
Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 wpSummary parameter to Special:FormEdit, the 2 "Template label optional" field in a form, or a 3 Field name in a template...
CVE-2015-6731
Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via a 1 section, 2 template, 3 label, or 4 newtemplate parameter to Special:CreateForm or 5 target or 6 altform parameter to Special:FormEdi...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 wpSummary parameter to Special:FormEdit, the 2 "Template label optional" field in a form, or a 3 Field name in a template...
CVE-2015-6731
Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via a 1 section, 2 template, 3 label, or 4 newtemplate parameter to Special:CreateForm or 5 target or 6 altform parameter to Special:FormEdi...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via a 1 section, 2 template, 3 label, or 4 newtemplate parameter to Special:CreateForm or 5 target or 6 altform parameter to Special:FormEdi...
CVE-2015-6732
Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 wpSummary parameter to Special:FormEdit, the 2 "Template label optional" field in a form, or a 3 Field name in a template...
CVE-2015-6731
CVE-2015-6731 concerns the MediaWiki SemanticForms extension. The vulnerability is an XSS flaw in several parameters exposed by forms: section_, template_ , label_*, new_template (Special:CreateForm) and target, alt_form (Special:FormEdit). The root cause is inadequate input filtering in these pa...
CVE-2015-6731
Multiple cross-site scripting XSS vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via a 1 section, 2 template, 3 label, or 4 newtemplate parameter to Special:CreateForm or 5 target or 6 altform parameter to Special:FormEdi...
CVE-2015-6732
CVE-2015-6732 relates to multiple XSS vulnerabilities in the MediaWiki SemanticForms extension. The vulnerability allows remote attackers to inject arbitrary web script or HTML via (1) wpSummary on Special:FormEdit, (2) the Template label (optional) field, or (3) a Field name in a form/template. ...
CVE-2014-3455
Multiple cross-site request forgery CSRF vulnerabilities in the 1 CreateProperty, 2 CreateTemplate, 3 CreateForm, and 4 CreateClass special pages in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allow remote attackers to hijack the...
CVE-2014-3454
Cross-site request forgery CSRF vulnerability in Special:CreateCategory in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to hijack the authentication of users for requests that create categories via unspecified vecto...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Special:CreateCategory in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to hijack the authentication of users for requests that create categories via unspecified vecto...