phpList 2.10.17 Remote SQL Injection and XSS Vulnerability

No description provided by source. phpList 2.10.17 Remote SQL Injection and XSS Vulnerability Vendor: phpList Ltd Product web page: http://www.phplist.com Affected version: 2.10.17 Summary: phplist is the world's most popular open source email campaign manager. phplist is free to download, instal...

FreeBSD : otrs -- XSS Issue (70b72a52-9e54-11e3-babe-60a44c524f57)

The OTRS Project reports : An attacker could send a specially prepared HTML email to OTRS. If he can then trick an agent into following a special link to display this email, JavaScript code would be executed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

WordPress WooCommerce 2.0.17 Cross Site Scripting

Wordpress WooCommerce Plugin 2.0.17 Cross-Site Scripting Vulnerability Vendor: WooThemes Product web page: http://www.woothemes.com Affected version: 2.0.17 and 2.0.14 Summary: WooCommerce is an open source e-commerce plugin for WordPress. Desc: The plugin suffers from a XSS issue due to a...

MGASA-2013-0276 Updated mediawiki package fixes security vulnerabilities

Full path disclosure in MediaWiki before 1.20.7, when an invalid language is specified in ResourceLoader CVE-2013-4301. Several API modules in MediaWiki before 1.20.7 allowed anti-CSRF tokens to be accessed via JSONP CVE-2013-4302. An issue with the MediaWiki API in MediaWiki before 1.20.7 where ...

Blue Coat ICAP Patience Page XSS

The remote host is running a version of Blue Coat ProxySG that suffers from a XSS issue. An attacker can exploit this issue by sending a malicious link that will redirect the user to the ICAP 'Patience' page which will echo the link back, unfiltered. %NASLMINLEVEL 70300 C Tenable Network Security...

Fedora 16 : sticky-notes-0.3.09062012.4-5.fc16 (2012-9714)

First package release. - Fix XSS issue in username parameter at login page. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Design/Logic Flaw

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS UXSS" issue...

Fedora Core 10 FEDORA-2009-8577 (buildbot)

The remote host is missing an update to buildbot announced via advisory FEDORA-2009-8577. OpenVAS Vulnerability Test $Id: fcore20098577.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8577 buildbot Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-8516 (buildbot)

The remote host is missing an update to buildbot announced via advisory FEDORA-2009-8516. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-8577 (buildbot)

The remote host is missing an update to buildbot announced via advisory FEDORA-2009-8577. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora 11 : buildbot-0.7.11p3-2.fc11 (2009-8516)

Update to new upstream version 0.7.11p3: http://pypi.python.org/pypi/buildbot/0.7.11p3 fixing XSS issue detailed in upstream security alert: http://buildbot.net/tracSecurityAlert Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Core 9 FEDORA-2009-2873 (drupal-cck)

The remote host is missing an update to drupal-cck announced via advisory FEDORA-2009-2873. OpenVAS Vulnerability Test $Id: fcore20092873.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2873 drupal-cck Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 10 FEDORA-2009-2869 (drupal-cck)

The remote host is missing an update to drupal-cck announced via advisory FEDORA-2009-2869. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 8 : wordpress-2.3.3-0.fc8 (2008-1559)

Fri Feb 8 2008 John Berninger - 2.3.3-0 - update to 2.3.3 for security fixes - BZ 431547 - Sun Dec 30 2007 Adrian Reber - 2.3.2-1 - updated to 2.3.2 bz 426431, Draft Information Disclosure - Tue Oct 30 2007 Adrian Reber - 2.3.1-1 - updated to 2.3.1 bz 357731, wordpress XSS issue - Mon Oct 15 2007...

Fedora 7 : wordpress-2.3.3-0.fc7 (2008-1512)

Fri Feb 8 2008 John Berninger - 2.3.3-0 - update to 2.3.3 for security fixes - BZ 431547 - Sun Dec 30 2007 Adrian Reber - 2.3.2-1 - updated to 2.3.2 bz 426431, Draft Information Disclosure - Tue Oct 30 2007 Adrian Reber - 2.3.1-1 - updated to 2.3.1 bz 357731, wordpress XSS issue - Mon Oct 15 2007...

snitz-multi.txt

HSC Snitz Forums Multiple Vulnerabilities Snitz Forums Default Database installation allows remote users to download the database which contains critical information. As a result, an attacker exploiting this vulnerability will be able to obtain detailed information. An attacker may leverage xss...

Radical Technologies - Portal Search- multiple XSS issue

Site : Raditech.es Product : Portal Search May be others Portal Search is a product that can help to search in one or multiple Web sites. http://www.raditech.es/esp/servicios/portal-search.shtml This product can SEARCH and INDEX the contents of a entire web site,additionally this product doesn't...

moinmoin -- multiple vulnerabilities

MoinMoin Security advisory XSS issue in login action XSS issue in AttachFile action XSS issue in RenamePage/DeletePage action XSS issue in gui editor...

CVE-2005-4003

Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions ASPS Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 srchproductname parameter to advsearch.asp and 2 bsearch parameter to...

phpBB 2.0.17 released

Hi everyone, phpBB Group announces the release of phpBB 2.0.17, the "no, we did not forget naming it last time" release. This release addresses several bugfixes and some low security issues as well as the recently seemingly wide-spread XSS issue only affecting Internet Explorer. Please have a loo...