PT-2021-10363

Name of the Vulnerable Software and Affected Versions: Textpattern version 4.7.3 Description: The issue concerns an arbitrary file load via the file insert function in include/txp file.php. Recommendations: For Textpattern version 4.7.3, consider disabling the file insert function in include/txp...

PT-2024-11132 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76 driver, specifically the mt7615 component, where the first pointer in the txp needs to be unmapped to prevent DMA mapping entries from leaking...

Memory Corruption Vulnerability in Xinjie Electric Touch Screen Editing Software Twin 2.D.3n

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.D.3n, which can be exploit...

CVE-2008-5757

Cross-site scripting XSS vulnerability in textarea/index.php in Textpattern aka Txp CMS 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action. NOTE: some of these details are obtained from third party information...

CVE-2008-5757

Textpattern (Txp CMS) 4.0.6 and earlier is affected by a cross-site scripting (XSS) vulnerability in textarea/index.php. The issue allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action. The vulnerability is triggered through Form/body...

CVE-2008-5757: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in textarea/index.php in Textpattern aka Txp CMS 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action. NOTE: some of these details are obtained from third party information...

CVE-2008-5669

CVE-2008-5669 affects Textpattern (Txp CMS) 4.0.5. The vulnerability lies in index.php used by the comments preview section, where a long message parameter can be sent by an attacker to trigger a denial of service. The available connected documents confirm the affected product/version and the att...

CVE-2008-5670

Textpattern (Txp CMS) 4.0.5 is affected by a vulnerability in the password reset workflow: it does not require the old password, enabling a password change after session hijacking. This is documented across multiple sources (NVD/NVD-derived entries). Impact described as allowing remote attackers ...

CVE-2008-5668: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Textpattern aka Txp CMS 4.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to setup/index.php or 2 the name parameter to index.php in the comments preview section...