magpierss vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpie_debug.php and /scripts/magpie_simple.php page that if you send a specific...

Magpierss Project Magpierss 0.72

5

CVSSv2

Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpie_debug.php or /scripts/magpie_simple.php page, it's possible to request any internal page if you use a https request....

Magpierss Project Magpierss 0.72

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url...

Blogbuddies Blogbuddies 0.3 Jaws Jaws 0.6.2 Magpierss Magpierss 7.12 EDB exploits available

5

CVSSv2

Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rss_fetch.inc.php or (2) rss_parse.inc.php, which reveals the path in various error messages....

Kellan Elliott-mccrea Magpierss

4.3

CVSSv2

An issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss/scripts/magpie_slashbox.php is not filtered, resulting in an XSS vulnerability....

Nagios Nagios Xi

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (b) magpie_simple.php in external/magpierss/scripts/, the (2) rss_url...

Oicgroup Exponent Cms 0.94 Oicgroup Exponent Cms 0.95 Oicgroup Exponent Cms 0.96.1 Oicgroup Exponent Cms 0.96.3 Oicgroup Exponent Cms 0.96.4 Oicgroup Exponent Cms 0.96.5 Oicgroup Exponent Cms2 EDB exploits available

4.3

CVSSv2

An issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss/scripts/magpie_simple.php is not filtered, resulting in an XSS vulnerability....

Nagios Nagios Xi

2.6

CVSSv2

Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter....

Runcms Runcms 2.1

7.5

CVSSv2

The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly...

Snoopy Snoopy 1.21 EDB exploit available

7.5

CVSSv2

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for...

Nagios Nagios1 EDB exploit available3 Github repositories available1 Article available

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook