UBUNTU-CVE-2010-4209

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

CVE-2010-4209

CVE-2010-4209 is an XSS in the YUI Flash component (swfstore/swfstore.swf) used by Bugzilla 3.7.1–3.7.3 and 4.1 with YUI 2.8.0–2.8.1. The vulnerability allows remote attackers to inject arbitrary scripts/HTML via the swfstore vector. Connected Nessus/OpenVAS/Moodle-related entries corroborate the...

CVE-2010-4208

CVE-2010-4208 is an XSS vulnerability in the Flash component infrastructure of YUI, specifically in the uploader.swf used by YUI 2.5.0 through 2.8.1 (and related references indicate continued concern up to 2.9.0). The root cause is improper validation in the Flash uploader assets, allowing remote...

CVE-2010-4207

The CVE-2010-4207 entry concerns a Cross-site Scripting (XSS) flaw in the YUI Flash-based Chart infrastructure. Affected are YUI library versions 2.4.0 through 2.8.1 (and related charts.swf usage in Bugzilla, Moodle, etc.). Root cause stated in sources is improper validation in the Flash componen...

CVE-2010-4207

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf...

CVE-2010-4208

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf...

CVE-2010-4209

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

Bugzilla < 3.2.9 / 3.4.9 / 3.6.3 Multiple Vulnerabilities

Binary data 5700.prm...

YUI charts.swf / swfstore.swf / uploader.swf XSS

The version of the YUI library of JavaScript utilities and controls hosted on the remote web server includes at least one SWF file that is affected by an unspecified cross-site scripting vulnerability. An attacker can leverage this issue to inject arbitrary HTML or script code into a user's brows...

YUI JavaScript library -- JavaScript injection exploits in Flash components

The YUI team reports: A security-related defect was introduced in the YUI 2 Flash component infrastructure beginning with the YUI 2.4.0 release. This defect allows JavaScript injection exploits to be created against domains that host affected YUI .swf files...

YUI Images Script Shell Upload

Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link: http://momche.net/res/YUI-upload/html/momche-yui-upload.zip Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz Exploit : http://127.0.0.1/YUI-upload/html Upload shell .php.giff Go To...

YUI Images Script - Arbitrary File Upload

YUI Images Script - Arbitrary File Upload Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link: http://momche.net/res/YUI-upload/html/momche-yui-upload.zip Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz Exploit :...

YUI Images Script Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================ YUI Images Script Shell Upload Vulnerability ============================================ Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link:...

YUI Images Script - Arbitrary File Upload

Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link: http://momche.net/res/YUI-upload/html/momche-yui-upload.zip Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz Exploit : http://127.0.0.1/YUI-upload/html Upload shell .php.giff Go To...

CVE-2008-0545

CVE-2008-0545 describes multiple directory traversal vulnerabilities in Bubbling Library 1.32. The issue allows remote attackers to include and execute arbitrary local files via a .. in the uri parameter passed to dispatcher/framework/ templates (yui-menu.tpl.php, simple.tpl.php, advanced.tpl.php...

ext10-lfi.txt

ext 1.0 alpha1 feed-proxy.php Remote File Disclosure D.Script: http://yui-ext.com/deploy/ext-1.0-alpha1.zip Discovered by: Alkomandoz Hacker Homepage: http://www.asb-may.net - mohandko.com - sniper-sa.com - tryag.com V.Code In /examples/layout/feed-proxy.php...

Ext 1.0 (feed-proxy.php feed) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== Ext 1.0 feed-proxy.php feed Remote File Disclosure Vulnerability ================================================================== ext 1.0 alpha1 feed-proxy.php Remote Fil...

Ext 1.0 - feed-proxy.php?feed Remote File Disclosure

Ext 1.0 - feed-proxy.php?feed Remote File Disclosure ext 1.0 alpha1 feed-proxy.php Remote File Disclosure D.Script: http://yui-ext.com/deploy/ext-1.0-alpha1.zip Discovered by: Alkomandoz Hacker Homepage: http://www.asb-may.net - mohandko.com - sniper-sa.com - tryag.com V.Code In...