Lucene search
Manideep KPATCHSTACK:B42EA48EC84F06483AB0FDD38514E536HistoryDec 07, 2014 - 12:00 a.m.
WordPress iTwitter Plugin <= 0.04 - Multiple CSRF and XSS
2014-12-0700:00:00
Manideep K
patchstack.com
4
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks.
Solution
This plugin is closed.
Related
cvelist
cvelist
CVE-2014-9336
2014-12-19 15:00:00
vulnerlab
vulnerlab
iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability
2014-12-15 00:00:00
iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability
2014-12-15 00:00:00
wpvulndb
wpvulndb
iTwitter <= 0.04 - XSS & CSRF
2014-12-19 21:07:40
packetstorm
packetstorm
WordPress iTwitter 0.04 Cross Site Request Forgery / Cross Site Scripting
2014-12-18 00:00:00
WordPress iTwitter WP 0.04 CSRF / XSS
2014-12-14 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-12-19 15:59:00
cve
cve
CVE-2014-9336
2014-12-19 15:59:00
securityvulns
securityvulns
iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability
2014-12-22 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related for PATCHSTACK:B42EA48EC84F06483AB0FDD38514E536