725 matches found
civic crm 422
upload exploit /RFI 260413 developer http://civicrm.org/category/civicrm-blog-categories/civicrm-v43 release 4.3.1 Authors:...
aiContactSafe 2.0.19
xss 160413 developer release statement for version 2.0.21 Authors:...
alfcontact
xss 230413...
[20130407] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in highlighter plugin...
[20130402] - Core - Information Disclosure
Inadequate permission checking allows unauthorised user to see permission settings in some circumstances...
[20130401] - Core - Privilege Escalation
Inadequate permission checking allows unauthorised user to delete private messages...
[20130403] - Core - XSS Vulnerability
Inadequate filtering allows possibility of XSS exploit in some circumstances...
[20130405] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in Voting plugin...
MT Fire Eagle
LFI http://joomlacode.org/gf/project/jfireeagle/frs/http://www.moto-treks.com 190410 product considered retired and to be replaced by dev Authors:...
worldrates
http://dev.pucit.edu.pk/120410 Authors:...
[20130406] - Core - DOS Vulnerability
Object unserialize method leads to possible denial of service vulnerability...
[20130404] - Core - XSS Vulnerability
Use of old version of Flash-based file uploader leads to XSS vulnerability...
[20130202] - Core - Information Disclosure
Undefined variable caused information disclosure in some situations...
[20130203] - Core - Information Disclosure
Coding errors led to information disclosure in some situations...
[20130201] - Core - Information Disclosure
Method of encoding search terms led to possible information disclosure...
[20121101] - Core - Clickjacking
Inadequate protection leads to clickjacking vulnerability...
[20121102] - Core - Clickjacking
Inadequate protection leads to clickjacking vulnerability...
[20121001] - Core - XSS Vulnerability
Typographical error leads to XSS vulnerability in language search component...
[20120902] - Core - XSS Vulnerability
Inadequate escaping of output leads to XSS vulnerability in language switcher module...
[20120602] - Core - Information Disclosure
Inadequate filtering leads SQL error and information disclosure...
[20120901] - Core - XSS Vulnerability
Inadequate escaping of output leads to XSS vulnerability...
[20120601] - Core - Privilege Escalation
Inadequate checking leads to possible user privilege escalation...
[20120303] - Core - Privilege Escalation
Programming error allows privilege escalation in some cases...
[20120305] - Core - Password Change
Insufficient randomness leads to password reset vulnerability...
[20120304] - Core - Password Change
Insufficient randomness leads to password reset vulnerability...
[20120301] - Core - SQL Injection
Inadequate escaping leads to SQL injection vulnerability...
[20120302] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability...
[20120308] - Core - XSS Vulnerability
Inadequate filtering in update manager leads to XSS vulnerability...
[20120203] - Core - Information Disclosure
Inadequate validation leads to path disclosure in administrator...
[20120201] - Core - Information Disclosure
Inadequate validation leads to information disclosure in administrator...
[20120104] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability...
[20120101] - Core - Information Disclosure
Inadequate filtering leads to information disclosure...
[20120307] - Core - Information Disclosure
Inadequate permission checking allows unauthorised viewing of some administrative back end information...
[20120306] - Core - Information Disclosure
Inadequate permission checking allows unauthorised viewing of administrative back end information...
[20120202] - Core - Information Disclosure
On some servers the error log could be read by unauthorised users...
[20120103] - Core - Information Disclosure
Inadequate filtering leads to information disclosure...
[20120102] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability...
[20111102] - Core - Password Change
Weak random number generation during password reset leads to possibility of changing a user's password...
[20111103] - Core - Password Change
Weak random number generation during password reset leads to possibility of changing a user's password...
[20111101] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in back end...
[20110903] - Core - Information Disclosure
Inadequate error checking causes information disclosure...
[20111003] - Core - Information Disclosure
Weak encryption causes potential information disclosure...
[20111001] - Core - Information Disclosure
Weak encryption causes potential information disclosure...
[20110902] - Core - XSS Vulnerability
Inadequate escaping leads to XSS vulnerability in back end...
[20110901] - Core - XSS Vulnerability
Inadequate escaping leads to XSS vulnerability in comsearch...
[20111002] - Core - Information Disclosure
Inadequate error checking causes potential information disclosure...
[20110701] - XSS Vulnerability
Inadequate escaping leads to XSS vulnerability...
[20110602] - Information Disclosure
Inadequate filtering causes possible information disclosure...
[20110604] - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability...
[20100423] - Core - Sessation Fixation
Session id doesn't get modified when user logs in. A remote site may be able to forward a visitor to the Joomla! site and set a specific cookie. If the user then logs in, the remote site can use that cookie to authenticate as that user...