ProCheckUp Security Advisory 2010.3

PR10-03: Authenticated XSS within the Apache Axis2 administration console Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: Severity: Medium Description: Axis2 is a web services/SOAP/WDSL engine, widely used within many commercial products Procheckup h...

Lussumo Vanilla 'definitions.php' Remote File Include Vulnerabilities

This host is running Lussumo Vanilla and is prone remote file include vulnerabilities OpenVAS Vulnerability Test $Id: gblussumovanillamultremotefileinclvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Lussumo Vanilla 'definitions.php' Remote File Include Vulnerabilities Authors: Madhuri D Copyright:...

Lussumo Vanilla 'definitions.php' RFI Vulnerabilities

Lussumo Vanilla is prone to remote file include RFI vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vanilla-1.1.10 <= Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ===================================================== Vanilla-1.1.10 = Remote File Inclusion Vulnerability ===================================================== Vanilla-1.1.10 = Remote File Inclusion Vulnerability Title: Vanilla-1.1.10 = Remot...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allow remote attackers to execute arbitrary PHP code via a URL in the 1 include and 2 Configuration'LANGUAGE' parameters...

CVE-2010-1337

Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allow remote attackers to execute arbitrary PHP code via a URL in the 1 include and 2 Configuration'LANGUAGE' parameters...

CVE-2010-1337

Summary: CVE-2010-1337 affects Lussumo Vanilla (definitions.php) and enables remote PHP code execution through remote file inclusion in two parameters: include and Configuration['LANGUAGE']. It is stated for Vanilla 1.1.10 and possibly earlier versions (0.9.2 and others). What is affected: Lussum...

Lussumo Vanilla 1.1.10 - 'definitions.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38889/info Vanilla is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also...

Lussumo Vanilla 1.1.10 - definitions.php Multiple Remote File Inclusions

Lussumo Vanilla 1.1.10 - definitions.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/38889/info Vanilla is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacke...

Vanilla 1.1.10 <= Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================== Vanilla-1.1.10 = Remote File Inclusion Vulnerability ===================================================== Title: Vanilla-1.1.10 = Remote File Inclusion Vulnerability Version: 1.1.10...

Vanilla 1.1.10 Remote File Inclusion

Vanilla-1.1.10 = Remote File Inclusion Vulnerability Title: Vanilla-1.1.10 = Remote File Inclusion Vulnerability Version: 1.1.10 link: http://php.opensourcecms.com/scripts/redirect/website.php?id=128 License: - Author: eidelweiss Date: 2010/03/22 Contact: eidelweissatcyberservices.com Thanks: Jos...

Vanilla 'RequestName' Cross-Site Scripting Vulnerability

The host is running Lussumo Vanilla and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gblussumovanillaxssvuln.nasl 5804 2017-03-31 06:06:40Z ckuerste $ Vanilla 'RequestName' Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...

Vanilla <= 1.1.7 'RequestName' XSS Vulnerability

Lussumo Vanilla is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vanilla Version Detection

This script finds the installed Vanilla version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Lussumo Vanilla ajax/updatecheck.php模块跨站脚本漏洞

BUGTRAQ: 35114 Vanilla（香草）是一个开源的多语言、完全可扩展的论坛程序。 输入传递给“ RequestName ”参数中的Ajax / updatecheck.php是没有正确地过滤，然后返回给用户。这可以被用来执行任意HTML和脚本代码在用户的浏览器会在背景下，受影响网站。 Lussumo Vanilla 1.1.5\1.1.7 厂商补丁： Lussumo ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-1845

Cross-site scripting XSS vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter...

CVE-2009-1845

Cross-site scripting XSS vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter...

CVE-2009-1845

CVE-2009-1845 describes a cross-site scripting (XSS) vulnerability in Lussumo Vanilla specifically in ajax/updatecheck.php, affecting Vanilla 1.1.5 and 1.1.7. The underlying issue is that the RequestName parameter can be exploited to inject arbitrary web script or HTML. Connected sources (OpenVAS...

Vanilla v.1.1.7 Cross-Site Scripting

Author: Gerendi Sandor Attila Original advisory: http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html Date: May 14, 2009 Package: Vanilla 1.1.7 Product Homepage: http://getvanilla.com/ Versions Affected: v.1.1.7, 1.1.5 Other versions may also be affected Severity: Medium Inpu...