8156 matches found
CVE-2014-9434
Cross-site scripting XSS vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter...
CVE-2014-9435: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the 1 sectionID parameter to admin/managersection.php, 2 userID parameter to admin/edituser.php, 3 username parameter to admin/admin.php, or 4 title parameter to...
CVE-2014-9434: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter...
PT-2015-4198
Name of the Vulnerable Software and Affected Versions Absolut Engine version 1.73 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via several parameters, including the sectionID parameter to "admin/managersection.php", the userID...
PT-2015-4197
Name of the Vulnerable Software and Affected Versions Absolut Engine version 1.73 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote authenticated users to inject arbitrary web script or HTML via the title parameter in the administrative backend...
CVE-2011-5301
Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...
CVE-2011-5301
Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...
CVE-2011-5301: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...
PT-2015-3497
Name of the Vulnerable Software and Affected Versions PHPDug version 2.0.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including the story url parameter to "add story.php", the email parameter to "editprofile.php", the title paramet...
PT-2015-3483
Name of the Vulnerable Software and Affected Versions HESK versions prior to 2.4.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including hesk settingstmp title and hesklangENCODING to /inc/header.inc.php,...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in view.php in JCE-Tech PHP Video Script aka Video Niche Script 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 video or 2 title parameter...
PT-2014-8985
Name of the Vulnerable Software and Affected Versions WordPress PWGRandom plugin version 1.11 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the pwgrandom tit...
CVE-2014-8752: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in view.php in JCE-Tech PHP Video Script aka Video Niche Script 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 video or 2 title parameter...
Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting
Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome &...
PT-2014-8711
Name of the Vulnerable Software and Affected Versions JCE-Tech PHP Video Script aka Video Niche Script version 4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the video or title parameter in view.php, potentially leading to cross-site scripting XSS...
jetAudio 8.1.3.2200 Crash Proof Of Concept
Exploit Title : jetAudio 8.1.3.2200 Basic m3u Crash POC Product : jetAudio Basic Date : 27.12.2014 Exploit Author : Hadji Samir [email protected] Software Link : http://www.jetaudio.com/download/ Vulnerable version : 8.1.3.2200 Basic Vendor Homepage : http://www.jetaudio.com/ Tested on : Windows 7...
CVE-2013-4754
Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...
CVE-2013-4754
Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...
WordPress Plugin DandyID Services Has Multiple Cross-Site Request Forgery Vulnerabilities
WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. Multiple cross-site request forgery vulnerabilities in WordPress plugin DandyID Services 1.5.9 and earlier versions allow remote attackers t...