phlyLabs phlyMail Lite 4.03.04 - Full Path Disclosure Persistent Cross-Site Scripting

phlyLabs phlyMail Lite 4.03.04 - Full Path Disclosure Persistent Cross-Site Scripting phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities form method="POST" action="http://localhost/config.php?action=user...

MS System Center Operations Manager XSS Vulnerabilities (2748552)

This host is missing an important security update according to Microsoft Bulletin MS13-003. OpenVAS Vulnerability Test $Id: secpodms13-003.nasl 6520 2017-07-04 14:28:49Z cfischer $ MS System Center Operations Manager XSS Vulnerabilities 2748552 Authors: Rachana Shetty Copyright: Copyright c 2013...

OracleBI Discoverer <= 10.1.2.48.18 'node' XSS Vulnerability

OracleBI Discoverer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Rokbox Plugin Multiple Vulnerabilities

WordPress Rokbox Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress...

Google Chrome < 23.0.1271.91 Multiple Vulnerabilities

Binary data 6628.pasl...

Multiple vulnerabilities in Achievo

High-Tech Bridge Security Research Lab discovered two vulnerabilities in Achievo, which can be exploited to perform SQL injection and cross-site scripting XSS attacks. 1 SQL Injection vulnerability in Achievo: CVE-2012-5865 The vulnerability was discovered in the "dispatch.php" script while...

Google Chrome < 23.0.1271.64 Multiple Vulnerabilities

Binary data 800919.prm...

WordPress Core 3.4.2 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/55660/info WordPress is prone to a cross-site request-forgery vulnerability because the application fails to properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user...

Flaw in Oracle Logon Protocol Leads to Easy Password Cracking

There is a serious vulnerability in the authentication protocol used by some Oracle databases, a flaw that could enable a remote attacker to brute-force a token provided by the server prior to authentication and determine a user’s password. The attacker could then log on as an authenticated user...

Arbor Networks Peakflow SP 'index/' Cross Site Scripting Vulnerability

Arbor Networks Peakflow SP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Auth bypass in /lib/base.php - ownCloud

/lib/base.php before ownCloud 4.0.8 does not properly validate the userid session variable via WebDAV, which allows authenticated attackers to gain access to other users files. Affected Software ownCloud Server 4.0.8 CVE-2012-5336 Action Taken It is recommended that all instances are upgraded to...

CentOS Update for sos CESA-2012:0958 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Kajona 3.4.1 Cross Site Scripting

Exploit for php platform in category web applications Product: Kajona Vendor: www.kajona.de Vulnerable Versions: 3.4.1 and probably prior Tested Version: 3.4.1 Vendor Notification: 20 June 2012 Vendor Patch: 26 June 2012 Public Disclosure: 11 July 2012 Vulnerability Type: Cross-Site Scripting XSS...

Schoolhos CMS - HTML Injection

Schoolhos CMS - HTML Injection source: https://www.securityfocus.com/bid/54204/info Schoolhos CMS is prone to an arbitrary file-upload vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could exploit these issues to...

Oracle iPlanet Web Server 7.0.x < 7.0.15 Multiple Vulnerabilities

According to its self-reported version, the Oracle iPlanet Web Server formerly Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.15. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting vulnerabilities exist due to parameter...

RedHat Update for sos RHSA-2012:0958-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

rack-cache Rubygem Sensitive HTTP Header Caching Weakness

Rack::Cache rack-cache contains a flaw related to the rubygem caching sensitive HTTP headers. This will result in a weakness that may make it easier for an attacker to gain access to a user's session via a specially crafted header...

Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability

This host is running Support Incident Tracker and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsitidparamxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability Authors: Rachana Shetty Copyright: Copyright...

PHP Address Book Multiple Cross Site Scripting Vulnerabilities

This host is running PHP Address Book and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpaddressbookmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ PHP Address Book Multiple Cross Site Scripting Vulnerabilities Authors: Sooraj KS Copyright:...

dalbum 144 build 174 - Cross-Site Request Forgery

dalbum 144 build 174 - Cross-Site Request Forgery dalbum 144 build 174 and earlier CSRF Vulnerabilities =================================================================================== Exploit Title:dalbum 144174 and earlier CSRF Vulnerabilities Vendor: http://www.dalbum.org/ Download link...