Lucene search
PRIOn knowledge basePRION:CVE-2014-9392HistoryDec 31, 2014 - 9:59 p.m.
Cross site request forgery (csrf)
2014-12-3121:59:00
PRIOn knowledge base
www.prio-n.com
3
Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the pictoBrowserFlickrUser parameter in the options-page.php page to wp-admin/options-general.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pictobrowser | le | 0.3.1 |
Related
packetstorm
packetstorm
WordPress PictoBrowser 0.3.1 CSRF / XSS
2014-12-18 00:00:00
cvelist
cvelist
CVE-2014-9392
2014-12-31 21:00:00
nvd
nvd
CVE-2014-9392
2014-12-31 21:59:05
cve
cve
CVE-2014-9392
2014-12-31 21:59:05
wpvulndb
wpvulndb
Pictobrowser Gallery <= 0.3.1 - Multiple CSRF
2014-12-18 00:00:00
patchstack
patchstack
WordPress PictoBrowser Plugin <= 0.3.1 - CSRF and XSS
2014-12-17 00:00:00