172 matches found
WP Socializer 2.4.2 - admin/wpsr-services-selector.php val Parameter XSS
The WP Socializer – Simple & Easy Social Media Share Icons WordPress plugin was affected by an admin/wpsr-services-selector.php val Parameter XSS security vulnerability...
PT-2014-3285
Name of the Vulnerable Software and Affected Versions PHPFox versions 3.7.3 through 3.7.5 Description The issue allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication. This is achieved by sending a request with a modified valitem id...
CVE-2013-2671: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...
PT-2014-4478
Name of the Vulnerable Software and Affected Versions ILIAS version 4.4.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML. The vulnerable parameters are tar, tar val, an...
Fedora Update for yubikey-val FEDORA-2011-15580
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for yubikey-val FEDORA-2011-15580
Check for the Version of yubikey-val OpenVAS Vulnerability Test Fedora Update for yubikey-val FEDORA-2011-15580 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
PT-2011-5151
Name of the Vulnerable Software and Affected Versions Unbound versions prior to 1.4.13p2 Description The issue is related to improper proof processing for NSEC3-signed zones in the validator/val nsec3.c component. This can be exploited by remote DNS servers sending a malformed response that lacks...
Fedora 16 : pam_yubico-2.8-1.fc16 / ykclient-2.6-1.fc16 / yubikey-val-2.10-1.fc16 (2011-15580)
security bugfix for CVE-2011-4120 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
CVE-2010-5052: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val parameter...
PT-2011-1987
Name of the Vulnerable Software and Affected Versions GetSimple CMS version 2.01 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the val parameter in the admin/components.php file. Recommendations For GetSimple CMS version 2.01,...
mpsw-rfi.txt
magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...
