DEBIAN-CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

Design By Idealgrowth SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Title : Design By Idealgrowth SQL Injection Vulnerability Vendor :...

9 1 8 Business Marketing website show system injection vulnerability-vulnerability warning-the black bar safety net

\newsshow. asp +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ % id=request. QueryString"id" k=request. QueryString"k" % % set rs3=server. CreateObject"adodb. recordset" sql3="select from hlfnews where id="&id rs3. open sql3,conn,1,1 if not rs3. eof then %...

PT-2011-1991

Name of the Vulnerable Software and Affected Versions com gbufacebook version 1.0.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the face id parameter in a show face action to the "index.php" endpoint. Recommendations For version...

CVE-2010-5029

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action...

CVE-2010-5029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action...

PT-2011-1964

Name of the Vulnerable Software and Affected Versions Ecomat CMS version 5.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the show parameter in a web action in the index.php file. Recommendations For Ecomat CMS version 5.0, upda...

Cisco Show and Share security vulnerabilities

Authentication bypass, code execution...

Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities Advisory ID: cisco-sa-20111019-sns Revision 1.0 For Public Release 2011 October 19 16:00 UTC GMT +--------------------------------------------------------------------- Summary...

Design/Logic Flaw

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

Code injection

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2584

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2585

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

CVE-2011-2584

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2585

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

PT-2011-3937

Name of the Vulnerable Software and Affected Versions Cisco Show and Share versions 52, 5.21, and 5.22 before 5.22.1 Description The issue allows remote attackers to access administration pages, including Encoders and Pull Configurations, Push Configurations, Video Encoding Formats, and...

CVE-2011-2584

Cisco Show and Share versions 5.2(1) and 5.2(2) prior to 5.2(2.1) are affected by CVE-2011-2584, which allows anonymous users to access several administrative pages (Encoders/Pull Configs, Push Configs, Video Encoding Formats, Transcoding) and potentially cause a live-event DoS or disclosure of i...

CVE-2011-2585

Cisco Show and Share (5.2(2) and earlier) is vulnerable to CVE-2011-2585 where an authenticated user with video-upload privileges can upload code that executes with the web server’s non-root privileges. Cisco’s advisory (CSCto69857) states the fix is in 5.2(2.1) or later; upgrade to a release equ...

PT-2011-3938

Name of the Vulnerable Software and Affected Versions Cisco Show and Share versions 52, 5.21, and 5.22 before 5.22.1 Description The issue allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges. Recommendations For versions 52, 5.21, and 5.22...