CVE-2017-18526

The moreads-se plugin before 1.4.7 for WordPress has XSS...

SQL injection vulnerability in the ad***.php page of YXcmsApp 1.4.7 (CNVD-2019-05336)

YXcmsApp is a PHP and MySQL based enterprise building content management system CMS. A SQL injection vulnerability exists in the ad.php page of YXcmsApp 1.4.7, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in YXcmsApp1.4.7's ad***.php Page

YXcmsApp is a PHP and MySQL based enterprise building content management system CMS. A SQL injection vulnerability exists in the ad.php page of YXcmsApp 1.4.7, which can be exploited by attackers to obtain sensitive information from the database...

UCMS cross-site scripting vulnerability (CNVD-2019-00981)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'dir' parameter...

UCMS cross-site scripting vulnerability (CNVD-2019-01087)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the sadmin\cedit.php file in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

UCMS Cross-Site Request Forgery Vulnerability

UCMS is a content management system written in PHP. A cross-site request forgery vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to create an administrator account with the help of ?do=useraddpost...

YXcms Arbitrary PHP Code Execution Vulnerability

YXcms is a PHP and MySQL based enterprise building content management system CMS. A security vulnerability exists in the protected/apps/appmanage/controller/indexController.php file in YXcms version 1.4.7. A remote attacker can exploit this vulnerability to execute arbitrary PHP code via a ZIP...

Cross-site Scripting Vulnerability in YXcms

YXCMS is an efficient website management system built on PHP+MYSQL. A cross-site scripting vulnerability exists in YXcms version 1.4.7. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

File Upload Vulnerability in YXCMS V1.4.7 Backend

YXCMS is an efficient website management system built on PHP+MYSQL. A file upload vulnerability exists in the background of YXCMS V1.4.7. An attacker can exploit this vulnerability to upload Trojan horse files to gain control of the web server...

Yxcms Cross-Site Scripting Vulnerability

Yxcms building system compatible cell phone is a website creation system. A cross-site scripting vulnerability exists in version 1.4.7 of the Yxcms building system compatible cell phone. A remote attacker can create a cross-site scripting vulnerability by making a request to...

WordPress Instagram Feed 1.4.6.2 Cross Site Scripting / Cross Site Request Forgery

------------------------------------------------------------------------ Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF ------------------------------------------------------------------------ Sipke Mellema, July 2016...

MGASA-2016-0049 Updated imlib2 packages fix security vulnerability

Various issues in imlib before 1.4.7 in the GIF loader CVE-2014-9762, CVE-2014-9764 and PNM loader CVE-2014-9763 could cause crashes. The imlib2 package has been updated to version 1.4.7, fixing these issues and several other bugs...

JVN#68452022: Zenphoto vulnerable to cross-site scripting

Zenphoto is a content management system CMS. Zenphoto contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing encoded user-supplied input. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libXfont package up to version 1.4.7 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

DEBIAN-CVE-2013-4362

WEB-DAV Linux File System davfs2 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in 1 kernelinterface.c and 2 mountdavfs.c, related to the "system" function...

Wireshark Multiple Denial of Service Vulnerabilities June-11 (Mac OS X)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkmultdosvulnjun11macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Wireshark Multiple Denial of Service Vulnerabilities June-11 Mac OS X Authors: Rachana...

Wireshark ANSI A MAP Files Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodwiresharkansimapdosvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ Wireshark ANSI A MAP Files Denial of Service Vulnerability Windows Authors: Madhuri D Copyright: Copyrigh...

Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharklucentascendfileparserdosvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability Windows Authors: Shashi...

Wireshark 'bytes_repr_len' Denial of Service Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkbytesreprlendosvulnmacosx.nasl 7019 2017-08-29 11:51:27Z teissa $ Wireshark 'bytesreprlen' Denial of Service Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...

Wireshark 'bytes_repr_len' Function Denial of Service Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...