Xinha 0.96 - 'spell-check-savedicts.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/46825/info Xinha is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker ...

XINHA Editor Plugin ExtendedFileManager Cross Site Scripting

MajorSecurity SA-077XINHA Editor Plugin "ExtendedFileManager" - Cross Site Scripting Issue Details ============= Product: XINHA Editor Plugin "ExtendedFileManager" Security-Risk: low Remote-Exploit: yes Vendor-URL: http://www.xinha.org/ Advisory-Status: published Credits ============= Discovered...

Fedora 13 : xinha-0.96.1-2.fc13 (2010-9320)

Name: CVE-2010-1916 URL: https://vulners.com/cve/CVE-2009-1916 Assigned: 20100511 Reference: MISC: http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiw yg-editor-plugin-configuration-injection-vulnerability/index.html Reference: MISC:...

Fedora 12 : xinha-0.96.1-1.fc12 (2010-9260)

Name: CVE-2010-1916 URL: https://vulners.com/cve/CVE-2009-1916 Assigned: 20100511 Reference: MISC: http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiw yg-editor-plugin-configuration-injection-vulnerability/index.html Reference: MISC:...

Fedora Update for xinha FEDORA-2010-9260

Check for the Version of xinha OpenVAS Vulnerability Test Fedora Update for xinha FEDORA-2010-9260 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for xinha FEDORA-2010-9260

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 12 Update: xinha-0.96.1-1.fc12

Xinha is a Javascript component that can be used to enhance a textarea fiel d in HTML. It can be used on its own or as part of a larger WYSIWYG module such as Scribite...

Fedora Update for xinha FEDORA-2010-9320

Check for the Version of xinha OpenVAS Vulnerability Test Fedora Update for xinha FEDORA-2010-9320 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for xinha FEDORA-2010-9320

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 13 Update: xinha-0.96.1-2.fc13

Xinha is a Javascript component that can be used to enhance a textarea fiel d in HTML. It can be used on its own or as part of a larger WYSIWYG module such as Scribite...

Serendipity < 1.5.3 'Xinha WYSIWYG' Editor Security Bypass Vulnerability

Serendipity is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:s9y:serendipity";...

Serendipity 'Xinha WYSIWYG' Editor Security Bypass Vulnerability

This host is running Serendipity and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbserendipitysecbypassvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Serendipity 'Xinha WYSIWYG' Editor Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...

MigasCMS Xinha Configuration Injection

================================================ migascms "Xinha" Plugin Configuration Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

migascms "Xinha" Plugin Configuration Injection Vulnerability

Exploit for php platform in category web applications ============================================================= migascms "Xinha" Plugin Configuration Injection Vulnerability =============================================================...

CVE-2010-1916

The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote attackers to bypass intended access restrictions and modify the configuration of arbitrary plugins via 1 crafted backendconfigsecretkeylocation and...

Default configuration

The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote attackers to bypass intended access restrictions and modify the configuration of arbitrary plugins via 1 crafted backendconfigsecretkeylocation and...

CVE-2010-1916

The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote attackers to bypass intended access restrictions and modify the configuration of arbitrary plugins via 1 crafted backendconfigsecretkeylocation and...

CVE-2010-1916

Removed by vendor...

CVE-2010-1916

The CVE-2010-1916 entry affects the Xinha WYSIWYG editor (0.96 Beta 2 and earlier) used in Serendipity 1.5.2 and older. The vulnerability arises in the dynamic configuration feature, where (1) backend_config_secret_key_location and backend_config_hash (used in a SHA1 hash of a shared secret that ...

MOPS-2010-020: Xinha WYSIWYG Plugin Configuration Injection Vulnerability

MOPS-2010-020: Xinha WYSIWYG Plugin Configuration Injection Vulnerability May 10th, 2010 A preauth plugin configuration injection vulnerability was discovered in the WYSIWYG editor Xinha that allows e.g. uploading arbitrary PHP files to the webserver. Affected versions Affected is Xinha = 0.96 Be...