Lucene search
Alexandro SilvaPATCHSTACK:CC7BA86711F278BDEF5C2EA3E26CB561HistorySep 19, 2013 - 12:00 a.m.
WordPress Bradesco Gateway Plugin <= 2.0 - XSS
2013-09-1900:00:00
Alexandro Silva
patchstack.com
14
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Because of this vulnerability in falha.php, the attackers can inject arbitrary web script or HTML via the QUERY_STRING.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bradesco gateway | le | 2.0 |
Related
openvas
openvas
WordPress WP-Ecommerce with Bradesco Gateway 'falha.php' XSS Vulnerability
2014-06-12 00:00:00
cve
cve
CVE-2013-5916
2014-05-08 15:55:00
cvelist
cvelist
CVE-2013-5916
2014-05-08 15:00:00
prion
prion
Cross site scripting
2014-05-08 15:55:00
securityvulns
securityvulns
packetstorm
packetstorm
WordPress Bradesco Gateway Cross Site Scripting
2013-09-23 00:00:00
wpvulndb
wpvulndb
Bradesco - falha.php URI Reflected XSS
2014-08-01 10:59:02
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for PATCHSTACK:CC7BA86711F278BDEF5C2EA3E26CB561