Lucene search
PRIOn knowledge basePRION:CVE-2014-9460HistoryJan 02, 2015 - 8:59 p.m.
Cross site request forgery (csrf)
2015-01-0220:59:00
PRIOn knowledge base
www.prio-n.com
2
Multiple cross-site request forgery (CSRF) vulnerabilities in the WP-ViperGB plugin before 1.3.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) vgb_page or (3) vgb_items_per_pg parameter in the wp-vipergb page to wp-admin/options-general.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-vipergb | le | 1.3.10 |
Related
cve
cve
CVE-2014-9460
2015-01-02 20:59:20
CVE-2015-9356
2019-08-28 12:15:11
patchstack
patchstack
WordPress WP ViperGB Plugin <= 1.3.10 - Multiple CSRF and XSS
2015-01-02 00:00:00
nvd
nvd
CVE-2014-9460
2015-01-02 20:59:20
CVE-2015-9356
2019-08-28 12:15:11
wpvulndb
wpvulndb
WP-ViperGB 1.3.10 - XSS Weakness & CSRF
2014-12-12 00:00:00
cvelist
cvelist
CVE-2014-9460
2015-01-02 20:00:00
CVE-2015-9356
2019-08-28 11:20:03
prion
prion
Code injection
2019-08-28 12:15:00