EUVD-2004-1732

Malware in sbrugna...

CVE-2023-35156: Improper Neutralization of Alternate XSS Syntax

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the delete template to perform a XSS, e.g. by using URL such as:...

Directory traversal

Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xPage parameter...

CVE-2008-1624: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xPage parameter...

CVE-2004-1738: Undefined Security Weakness

Cross-site scripting XSS vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter...