Lucene search
+L

CVE-2014-9396

🗓️ 31 Dec 2014 21:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

Multiple CSRF vulnerabilities in SimpleFlickr plugin 3.0.3 & earlier for WordPress allow hijacking of admin authentication for XSS attacks via parameters in simpleFlickr.php

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cnvd
CNVD
WordPress Plugin SimpleFlickr Has Multiple Cross-Site Request Forgery Vulnerabilities
8 Jan 201500:00
cnvd
cvelist
Cvelist
CVE-2014-9396
31 Dec 201421:00
cvelist
euvd
EUVD
EUVD-2014-9217
7 Oct 202500:30
euvd
nvd
NVD
CVE-2014-9396
31 Dec 201421:59
nvd
packetstorm
Packet Storm
WordPress SimpleFlickr 3.0.3 CSRF / XSS
18 Dec 201400:00
packetstorm
patchstack
Patchstack
WordPress SimpleFlickr Plugin <= 3.0.3 - Multiple CSRF and XSS
17 Dec 201400:00
patchstack
prion
Prion
Cross site request forgery (csrf)
31 Dec 201421:59
prion
wpvulndb
WPVulnDB
SimpleFlickr 3.0.3 - CSRF & XSS
3 Jan 201518:41
wpvulndb
NVD
Node
simpleflickr_projectsimpleflickrRange3.0.3wordpress
ParameterPositionPathDescriptionCWE
simpleflickr_widthrequest bodywp-admin/options-general.php?page=simpleFlickr.phpCSRF/XSS vulnerability allowing admin actions via a crafted POST to the options pageCWE-352
simpleflickr_bgcolorrequest bodywp-admin/options-general.php?page=simpleFlickr.phpCSRF/XSS vulnerability allowing admin actions via a crafted POST to the options pageCWE-352
simpleflickr_xmldatapathrequest bodywp-admin/options-general.php?page=simpleFlickr.phpCSRF/XSS vulnerability allowing admin actions via a crafted POST to the options pageCWE-352

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation