Computer Security
[EN] securityvulns.ru no-pyccku


Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:12.04.2011
Source:
SecurityVulns ID:11576
Type:remote
Threat Level:
5/10
Description:PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
Affected:WORDPRESS : The Gazette Edition 2.9
 IKIWIKI : ikiwiki 3.0
 ELXISCMS : eForum 1.1
CVE:CVE-2011-1401 (ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.)
Original documentdocumentby_argos_(at)_hotmail.com, Arbitary File Upload Vulnerability in Elxis CMS component eForum v1.1 (12.04.2011)
 documentDEBIAN, [SECURITY] [DSA 2214-1] ikiwiki security update (12.04.2011)
 documentMustLive, Уязвимости в теме The Gazette Edition для WordPress (12.04.2011)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod