Justin C. Klein Keane

The issue concerns the bbcode plugin in TinyMCE, which fails to properly enforce the security policy. This specifically affects the encoding directive and the valid elements attribute, allowing for cross-site scripting (XSS) attacks. An example of exploitation involves using a textarea element.

The issue allows remote attackers to cause a denial of service by consuming disk space through uploading a large file. This is related to the iThoughts web server in the iThoughtsHD app on iPad devices.

The issue allows remote attackers to upload arbitrary files by exploiting the WiFi Transfer feature. This is achieved by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file.

The issue is related to a cross-site scripting (XSS) vulnerability. It occurs when the WiFi Transfer feature is used, allowing remote attackers to inject arbitrary web script or HTML via a crafted map name.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary name.

The issue allows remote authenticated users with the "Administer OM Maximenu" permission to execute arbitrary PHP code via a "Link Title" when the "Title has PHP" option is enabled.

The issue allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service. This can be achieved by creating a block that references itself, leading to an infinite loop and time out.

Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews title parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this might be the same as CVE-2009-4083.1 or CVE-2011-0457.

The issue concerns multiple eval injection vulnerabilities in the import functionality of the Chaos Tool Suite module for Drupal. These vulnerabilities allow remote authenticated users with "administer page manager" privileges to execute arbitrary PHP code via input to a text area. The vulnerabilities are related to the `page manager page import subtask validate` function in `page manager/plugins/tasks/page.admin.inc` and the `page manager handler import validate` function in `page manager/page manager.admin.inc`.

The auto-complete functionality does not follow access restrictions, allowing remote authenticated users with "access content" privileges to read the title of an unpublished node. This can be achieved by using a specific value, such as 'q=ctools/autocomplete/node/' accompanied by the first character of the node's title, in the API endpoint "q=ctools/autocomplete/node/".

The issue allows remote attackers to hijack the authentication of administrators for requests. This can be done through requests that enable a page via a "q=admin/build/pages/nojs/enable/" value or disable a page via a "q=admin/build/pages/nojs/disable/" value.

A cross-site scripting (XSS) issue exists in the Sections module for Drupal, allowing remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name (also known as the Name field).

A cross-site scripting (XSS) issue exists in the Contact module of Drupal Core, specifically in the contact category name. This allows remote authenticated users with administer site-wide contact form permissions to inject arbitrary web script or HTML.

The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries.

Name of the Vulnerable Software and Affected Versions: Brilliant Gallery versions 5.x through 6.x Description: The issue allows remote authenticated users with "access brilliant gallery" permissions to execute arbitrary SQL commands. This can be achieved via the `nid`, `qid`, `state`, and possibly `user` parameters in the `brilliant gallery checklist save` function. Recommendations: For Brilliant Gallery versions 5.x through 6.x, consider restricting access to the `brilliant gallery checklist save` function until a patch is available. As a temporary workaround, limit the use of the `nid`, `qid`, `state`, and `user` parameters in the affected script to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.