Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

CVE-2013-2704

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

CVE-2013-2704

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

CVE-2013-2704

The CVE-2013-2704 entry concerns the WordPress plugin Dropdown Menu Widget (version 1.9.1). The vulnerability is described as a Cross-Site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of arbitrary users for requests that insert Cross-Site Scripting (XSS) sequen...

CVE-2013-2704: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences...

PT-2013-3881

Name of the Vulnerable Software and Affected Versions Dropdown Menu Widget plugin version 1.9.1 Description The issue is a cross-site request forgery CSRF vulnerability that allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS...

Fedora Update for kdelibs3 FEDORA-2013-8689

Check for the Version of kdelibs3 OpenVAS Vulnerability Test Fedora Update for kdelibs3 FEDORA-2013-8689 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

PT-2013-4579

Name of the Vulnerable Software and Affected Versions Feedweb plugin versions prior to 1.9 Description A cross-site scripting issue exists, allowing remote authenticated administrators to inject arbitrary web script or HTML. This is achieved via the wp post id parameter in the widget remove.php...

DIF Log Search Widget 1.0e Cross Site Scripting Vulnerability

ADIF Log Search Widget version 1.0e suffers from a cross site scripting vulnerability. Exploit Title: ADIF Log Search Widget XSS Arbitrary Vulnerability Date: 26/05/13 Exploit Author: k3170makan Vendor Homepage: http://wordpress.org/plugins/adif-log-search-widget/ Software Link:...

ADIF Log Search Widget 1.0e Cross Site Scripting

Exploit Title: ADIF Log Search Widget XSS Arbitrary Vulnerability Google Dork: Date: 26/05/13 Exploit Author: k3170makan Vendor Homepage: http://wordpress.org/plugins/adif-log-search-widget/ Software Link: http://wordpress.org/plugins/adif-log-search-widget/ Version: 1.0e Tested on: Ubuntu 12.04....

Google Chrome < 27.0.1453.93 Multiple Vulnerabilities

Binary data 800944.prm...

CVE-2013-2311: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in static/js/share.js aka the social bookmarking widget in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-3655

Name of the Vulnerable Software and Affected Versions Web2py versions prior to 2.3.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is due to a vulnerability in the static/js/share.js file, also known as the social...

Cross-site scripting vulnerability in the web2py social bookmarking widget

Overview The social bookmarking widget share.js in web2py contains a cross-site scripting vulnerability. web2py is a framework for creating and designing web applications. The social bookmarking widget in web2py contains a cross-site scripting vulnerability. Yuji Kosuga of Everforth Co., Ltd...

JVN#10461119: Cross-site scripting vulnerability in the web2py social bookmarking widget

web2py is a framework for creating and designing web applications. The social bookmarking widget in web2py contains a cross-site scripting vulnerability. Impact A user who accesses a site created by web2py which uses share.js may have an arbitrary script executed on its web browser. Solution Upda...

CVE-2013-1949

Social Media Widget social-media-widget plugin 4.0 for WordPress contains an externally introduced modification Trojan Horse, which allows remote attackers to force the upload of arbitrary files...

CVE-2013-1949

Social Media Widget social-media-widget plugin 4.0 for WordPress contains an externally introduced modification Trojan Horse, which allows remote attackers to force the upload of arbitrary files...

CVE-2013-1949

The CVE-2013-1949 entry concerns the WordPress Social Media Widget plugin version 4.0. It describes an externally introduced modification (Trojan Horse) in the plugin that enables remote attackers to force the upload of arbitrary files. Affected component: social-media-widget/plugin 4.0; root cau...

CVE-2013-1949: Undefined Security Weakness

Social Media Widget social-media-widget plugin 4.0 for WordPress contains an externally introduced modification Trojan Horse, which allows remote attackers to force the upload of arbitrary files...

PT-2013-3484

Name of the Vulnerable Software and Affected Versions Social Media Widget plugin version 4.0 Description The issue concerns an externally introduced modification, often referred to as a Trojan Horse, within the Social Media Widget plugin. This modification enables remote attackers to force the...