6 matches found
EUVD-2009-2394
Malware in sbrugna...
CVE-2018-10183: Improper Neutralization of Input During Web Page Generation
An issue was discovered in BigTree 4.2.22. There is cross-site scripting XSS in /core/inc/lib/less.php/test/index.php because of a $SERVER'REQUESTURI' echo, as demonstrated by the dir parameter in a file=charsets action...
Wordpress SI CAPTCHA AntiSpam 插件-test/index.php-跨站脚本漏洞
No description provided by source...
CVE-2014-5190: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Wordpress Plugin WP-Syntax <= 0.9.1 Remote Command Execution
No description provided by source. ====================================================================== Wordpress plugin WP-Syntax = 0.9.1 Remote Code Execution ====================================================================== This vulnerability was originally discovered by Raz0r on...
CVE-2009-2398: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// dot dot slash slash in the t parameter...