xml injection vulnerabilities and exploits

(subscribe to this query)

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.

Edit-xml Easy Xml Editor

SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated malicious user to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it i...

Sap Netweaver Knowledge Management Xml Forms 7.11 Sap Netweaver Knowledge Management Xml Forms 7.30 Sap Netweaver Knowledge Management Xml Forms 7.31 Sap Netweaver Knowledge Management Xml Forms 7.40 Sap Netweaver Knowledge Management Xml Forms 7.50 Sap Netweaver Knowledge Management Xml Forms 7.10

An XML external entity (XXE) injection vulnerability in XML-RPC.NET prior to 2.5.0 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, as demonstrated by a pingback.aspx POST request.

Xml-rpc.net Project Xml-rpc.net

1 Github repository

requests-xml v0.2.3 exists to contain an XML External Entity Injection (XXE) vulnerability which allows malicious users to execute arbitrary code via a crafted XML file.

Requests-xml Project Requests-xml 0.2.3

py-xml v1.0 exists to contain an XML External Entity Injection (XXE) vulnerability which allows malicious users to execute arbitrary code via a crafted XML file.

Py-xml Project Py-xml 1.0

The Export any WordPress data to XML/CSV WordPress plugin prior to 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability.

Soflyy Export Any Wordpress Data To Xml/csv

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local malicious user to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities,...

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local malicious user to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities,...

The Import all XML, CSV & TXT WordPress plugin prior to 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as admin

Smackcoders Import All Pages, Post Types, Products, Orders, And Users As Xml & Csv

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook