775 matches found
CVE-2008-0751
Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...
CVE-2008-0751
CVE-2008-0751 : Cross-site scripting in the Freetag before 2.96 plugin for S9Y Serendipity. When using Internet Explorer 6/7, an attacker can inject arbitrary script/HTML via PATH_INFO to plugin/tag/. Root cause is an XSS vulnerability in the plugin handling PATH_INFO. Affected: Freetag plugin (v...
[Full-disclosure] Serendipity Freetag-plugin XSS vulnerability
Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...
CVE-2008-0751: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to plugin/tag/...
serendipityfreetag-xss.txt
Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...
S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting
S9Y Serendipity Freetag-plugin 2.95 - style Cross-Site Scripting source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an...
S9Y Serendipity Freetag-plugin 2.95 - 'style' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27697/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to laun...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting XSS attacks on the blog page...
CVE-2007-6390
Cross-site request forgery CSRF vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting XSS attacks on the blog page...
CVE-2007-6390
CVE-2007-6390 affects the Serendipity mycalendar plugin (pre-0.13). The vulnerability is a CSRF flaw that could allow an attacker to perform actions as a blog administrator, which could be leveraged to enable or facilitate XSS on the blog page. Affected component: mycalendar plugin for Serendipit...
CVE-2007-6390: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting XSS attacks on the blog page...
CVE-2007-6205
Cross-site scripting XSS vulnerability in the remote RSS sidebar plugin serendipitypluginremoterss in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed...
CVE-2007-6205
Cross-site scripting XSS vulnerability in the remote RSS sidebar plugin serendipitypluginremoterss in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed...
CVE-2007-6205
CVE-2007-6205 is a cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) of S9Y Serendipity prior to 1.2.1. An attacker can inject arbitrary script/HTML via a link in an RSS feed. Public advisories (Debian DSA-1528-1, related OpenVAS/NVL) documen...
CVE-2007-6205
Cross-site scripting XSS vulnerability in the remote RSS sidebar plugin serendipitypluginremoterss in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed...
CVE-2007-6205: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the remote RSS sidebar plugin serendipitypluginremoterss in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed...
serendipity-xss.txt
Source: http://www.int21.de/cve/CVE-2007-6205-s9y.html Cross site scripting XSS in rss feed plugin of Serendipity 1.2 References http://www.s9y.org/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6205 Description The Serendipity blog system contains a plugin to display the content of feed...
Design/Logic Flaw
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
CVE-2007-4282
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
CVE-2007-4282
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...