CVE-2014-4554

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2014-4554

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2014-4554

The CVE concerns the WordPress SS Downloads plugin (templates/download.php) where an XSS vulnerability allows an attacker to inject arbitrary script/HTML via the title parameter in versions before 1.5. Impact is remote script injection; no exploitation details are provided in the documents. Remed...

PT-2014-5973

Name of the Vulnerable Software and Affected Versions SS Downloads plugin versions prior to 1.5 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title parameter in the templates/download.php file. Recommendations For version...

CVE-2014-4554: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Apple QuickTime/Darwin Streaming Server 4.1.x parse_xml.cgi File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6990/info A file retrieval vulnerability has been reported for QuickTime/Darwin Streaming Server. The vulnerability exists due to insufficient sanitization of some parameters given to the parsexml.cgi script. Information...

WordPress SS Downloads Cross Site Scripting

Exploit Title : Wordpress SS Downloads Plugin Cross Site Scripting Exploit Author : ACC3SS Vendor Homepage : http://wordpress.org/plugins/ss-downloads/developers/ Software Link : http://downloads.wordpress.org/plugin/ss-downloads.1.4.4.1.zip Date : 2014-01-19 Tested on : Windows 7 / Mozilla Firef...

CVE-2011-5228: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...

PT-2012-2205

Name of the Vulnerable Software and Affected Versions appRain CMF version 0.1.5 Description The issue is related to a cross-site scripting XSS vulnerability in the Search module. This allows remote attackers to inject arbitrary web script or HTML via the ss parameter in the quickstart/search...

PT-2012-5569

Name of the Vulnerable Software and Affected Versions Siche search module version 0.5 for Zeroboard Description The issue concerns SQL injection vulnerabilities in the ssearch.php file of the Siche search module. Remote attackers can execute arbitrary SQL commands by manipulating certain...

CVE-2012-4743: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...

WordPress SS-Downloads 1.4.3 Cross Site Request Forgery / File Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Microsoft SMB Server Zero Size Pool Allocation

=============================================================================== stratsec Security Advisory: SS-2010-007 MS SMB Server Zero Size Pool Allocation =============================================================================== Title: SS-2010-007 Microsoft SMB Server Zero Size Pool...

CVE-2008-4727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the contact update page ss/bwgkoemr.PUpdateEmrgContacts in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficie...

CVE-2007-6421: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in balancer-manager in modproxybalancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 ss, 2 wr, or 3 rr parameters, or 4 the URL...