Seeker Advisory Sep11: Reflected Cross Site Scripting in Microsoft SharePoint Portal

Seeker Research Center Security Advisory This vulnerability was discovered by Seeker® Automatic Run-Time Application Security Testing Solution Disclosed By Irene Abezgauz, September 13th, 2011 ========= I. Overview ========= A Cross Site Scripting vulnerability has been identified in Microsoft...

Opera Extended Validation Information Disclosure Vulnerabilities (Windows)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaextentedvalidationinfodiscvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Opera Extended Validation Information Disclosure Vulnerabilities Windows Authors: Rachana Shetty...

CentOS Update for seamonkey CESA-2009:0257 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Classified Script - c-BrowseClassified Cross-Site Scripting

Classified Script - c-BrowseClassified Cross-Site Scripting source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

MyBloggie 2.1.6 - HTML Injection SQL Injection

MyBloggie 2.1.6 - HTML Injection SQL Injection source: https://www.securityfocus.com/bid/48317/info myBloggie is prone to a SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...

MyBloggie 2.1.6 - HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/48317/info myBloggie is prone to a SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

encoder 0.4.10 - edit.php Cross-Site Scripting

encoder 0.4.10 - edit.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47755/info encoder is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

encoder 0.4.10 - 'edit.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47755/info encoder is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

todoyu 'lang' Parameter Cross Site Scripting Vulnerability

todoyu is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to ste...

Kusaba X Multiple Cross Site Scripting Vulnerabilities

Kusaba X is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DSA-2227-1 iceape - several

Bulletin has no description...

WordPress Plugin Sermon Browser 0.43 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/47574/info The Sermon Browser plugin for WordPress is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an...

SeaMonkey < 2.0.14 Multiple Vulnerabilities

Binary data 5904.prm...

PiXie CMS v1.04 <= Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Add Super User: Add Post: !-- Exploit Title: PiXie CMS v1.04 = CSRF Add Post Google Dork: allintext: "Pixie Powered" Date: 28/12/2010 Author: Ali Raheem AKA wolfmankurd Software Link: http://pixie-cms.googlecode.com/files/pixiev1.04.zip Versio...

PiXie CMS 1.04 - Multiple Cross-Site Request Forgery Vulnerabilities

Add Super User: Add Post: !-- Exploit Title: PiXie CMS v1.04 = CSRF Add Post Google Dork: allintext: "Pixie Powered" Date: 28/12/2010 Author: Ali Raheem AKA wolfmankurd Software Link: http://pixie-cms.googlecode.com/files/pixiev1.04.zip Version: =1.04 Tested on: Linux sheevaplug-debian...

PiXie CMS 1.04 - Multiple Cross-Site Request Forgery Vulnerabilities

PiXie CMS 1.04 - Multiple Cross-Site Request Forgery Vulnerabilities Add Super User: Add Post: !-- Exploit Title: PiXie CMS v1.04 = CSRF Add Post Google Dork: allintext: "Pixie Powered" Date: 28/12/2010 Author: Ali Raheem AKA wolfmankurd Software Link:...

Ubuntu Update for paste vulnerability USN-1026-1

Ubuntu Update for Linux kernel vulnerabilities USN-1026-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10261.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for paste vulnerability USN-1026-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mura CMS - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45384/info Mura CMS is prone to multiple cross-site-scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Microsoft IE cross-domain IFRAME gadgets keystrokes steal Vulnerability

Internet Explorer is prone to cross-domain iframe gadgets keystrokes steal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

TornadoStore 1.4.3 - SQL Injection HTML Injection

TornadoStore 1.4.3 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/41233/info TornadoStore is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues t...