WordPress Feature Slideshow Plugin 1.0.6 - Cross-Site Scripting Vulnerability

Feature Slideshow plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin Feature Slideshow 1.0.6 - src Cross-Site Scripting

WordPress Plugin Feature Slideshow 1.0.6 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46004/info The Feature Slideshow Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

Joomla Slideshow SQL Injection

Joomla Component slideshow SQL Injection Vulnerability Author :Fl0riX Bug Researchers Name : Joomla Comslideshow Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : http://www.nhainsaigon.com/index.php?option=comslideshow&catid=EXPLOIT Bug Fix Advice : Zararli...

PYSEC-2010-18

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/SlideShow.py, 2 action/anywikidraw.py, and 3 action/languagesetup.py, a similar issue to CVE-2010-2487...

Exponent CMS 0.97.0 Cross Site Scripting

Title: Exponent Slideshow XSS Vulnerability Vendor: Exponent Product: Exponent CMS Tested Version: 0.97.0 Threat Class: XSS Severity: High Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== The file "modules/slideshowmodule/slideshow.js.php" is prone to XSS...

Exponent Slideshow XSS Vulnerability

Title: Exponent Slideshow XSS Vulnerability Vendor: Exponent Product: Exponent CMS Tested Version: 0.97.0 Threat Class: XSS Severity: High Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== The file "modules/slideshowmodule/slideshow.js.php" is prone to XSS...

Flash Slideshow Maker buffer overflow

Buffer overflow on .fss files parsing...

[Bkis-03-2010] Vulnerability in Flash Slideshow Maker Vulnerability

Bkis-03-2010 Vulnerability in Flash Slideshow Maker Vulnerability 1. General Information Flash Slideshow Maker is a Flash album creator to make animated photo slide show with SWF file as the output format. Bkis has just detected a vulnerability in the software related to the processing of Flash...

Uphotogallery Server SQL Injection Vulnerabilty

Exploit for asp platform in category web applications =============================================== Uphotogallery Server SQL Injection Vulnerabilty =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability ============================================================...

JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability

Exploit for php platform in category web applications ===================================================================== JV2 Folder Gallery 3.1.1 popupslideshow.php Multiple Vulnerability =====================================================================...

Sql injection

SQL injection vulnerability in the Flash SlideShow slideshow extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-4338

SQL injection vulnerability in the Flash SlideShow slideshow extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-4338

CVE-2009-4338 affects the Flash SlideShow (slideshow) extension for TYPO3, version 0.2.2. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via unknown vectors. The issue is documented across multiple sources (NVD, CVE lists) with a consistent des...

CVE-2009-4338

SQL injection vulnerability in the Flash SlideShow slideshow extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-4338: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Flash SlideShow slideshow extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-3214

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

Stack overflow

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

CVE-2009-3214: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability ========================================================== ================== NaMe: Ultimate Fade-in slideshow 1.51 = She...