WordPress Plugin Dynamic Widgets 1.5.1 - themes.php Cross-Site Scripting

WordPress Plugin Dynamic Widgets 1.5.1 - themes.php Cross-Site Scripting source: https://www.securityfocus.com/bid/53513/info Dynamic Widgets plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

CVE-2012-1575: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

PT-2012-3350 · Cumin · Cumin

Name of the Vulnerable Software and Affected Versions: Cumin versions prior to r5238 Description: The issue involves multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The attack vectors involve widgets or pages...

cumin: multiple XSS flaws

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

cumin: multiple XSS flaws

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

WordPress catablog 1.6 plugin RFI Vulnerability

Exploit for php platform in category web applications +----------------------------------------------------------------------+ Exploit Title: wordpress thecartpress plugin local file inclusion LFI Google Dork: inurl:wp-content/plugins/thecartpress/widgets/ Date: 08/04/2012 Author: Tunisian spl01t...

CVE-2011-3794: Exposure of Sensitive Information to an Unauthorized Actor

Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files...

Information disclosure

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/menu/index.php and certain other files...

CVE-2011-3715

ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/statistics.php and certain other files...

CVE-2011-3703: Exposure of Sensitive Information to an Unauthorized Actor

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/menu/index.php and certain other files...

CVE-2011-3715: Exposure of Sensitive Information to an Unauthorized Actor

ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/statistics.php and certain other files...

Code Widgets DataBound Index Style Menu - category.asp SQL Injection

Code Widgets DataBound Index Style Menu - category.asp SQL Injection source: https://www.securityfocus.com/bid/49208/info Code Widgets DataBound Index Style Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Code Widgets DataBound Index Style Menu - 'category.asp' SQL Injection

source: https://www.securityfocus.com/bid/49208/info Code Widgets DataBound Index Style Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Code Widgets DataBound Collapsible Menu - main.asp SQL Injection

Code Widgets DataBound Collapsible Menu - main.asp SQL Injection source: https://www.securityfocus.com/bid/49209/info Code Widgets DataBound Collapsible Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections

source: https://www.securityfocus.com/bid/49210/info Code Widgets Multiple Question - Multiple Choice Online Questionaire is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/49207/info Code Widgets Online Job Application is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise t...

Code Widgets Online Job Application - admin.asp Multiple SQL Injections

Code Widgets Online Job Application - admin.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/49207/info Code Widgets Online Job Application is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQ...

Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections

Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections source: https://www.securityfocus.com/bid/49210/info Code Widgets Multiple Question - Multiple Choice Online Questionaire is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize...

Report: More Than 1 Million Web Sites Serving Malware in Q2

Web anti malware firm Dasient has published data claiming that more than 1 million Web sites were compromised in the second quarter, 2010 – a sharp increase. More than one million Web domains were infected with malicious code in the second quarter of 2010 – around one percent of all active Web...

MDVA-2010:153 : kdelibs4

In Mandriva Linux 2010.0 some widgets, such as the Opendesktop ones, resulted in plasma crashes. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...