EUVD-2012-4321

Malware in sbrugna...

CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

DEBIAN-CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

UBUNTU-CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

MediaWiki 1.x userlang参数跨站脚本漏洞

Bugtraq ID:55370 CVE ID: CVE-2012-4378 MediaWiki是一套以GPL授权发行的Wiki引擎。 通过"uselang"参数传递给index.php的输入在通过某些工具返回给用户之前缺少过滤，可导致基于DOM的跨站脚本攻击，构建构建恶意WEB页，诱使用户解析，可获得敏感信息或劫持用户会话。 0 MediaWiki 1.x 厂商解决方案 MediaWiki 1.18.5或1.19.2已经修复此漏洞，建议用户下载使用： http://wikipedia.sourceforge.net/...

Directory traversal

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the SESSIONuserLang parameter to 1 elisttasks.php, 2 managepmanagers.php, 3 manageusers.php, 4 helpfunc.php, 5...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

Exploit for unknown platform in category web applications ==================================================================== Flatnuke 2.5.8 userlang Local Inclusion / Delete All Users Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=o...

Flatnuke 2.5.8 - 'userlang' Local Inclusion / Delete All Users

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if...

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i;...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Flatnuke 2.5.8 "userlang" arbitrary local inclusion/delete all users exploit by rgod [email protected] site: http://retrogod.altervista.o...