8958 matches found
CVE-2011-4618
The CVE-2011-4618 entry concerns a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Advanced Text Widget (file advancedtext.php) before version 2.0.2. The underlying issue is improper handling of the page parameter, allowing remote attackers to inject arbitrary web script or HTML ...
Paypal Bug Bounty #20 - Persistent Web Vulnerabilities
Document Title: =============== Paypal Bug Bounty 20 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=682 PayPal UID: fxv444khi Release Date: ============= 2013-01-24 Vulnerability Laboratory ID VL-ID:...
CVE-2011-4618: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Paypal Bug Bounty #20 - Persistent Web Vulnerabilities
Document Title: =============== Paypal Bug Bounty 20 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=682 PayPal UID: fxv444khi Release Date: ============= 2013-01-24 Vulnerability Laboratory ID VL-ID:...
PT-2013-1465
Name of the Vulnerable Software and Affected Versions Advanced Text Widget plugin versions prior to 2.0.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter in the...
Scientific Linux Security Update : gtk2 on SL5.x i386/x86_64 (20130108)
An integer overflow flaw was found in the X BitMap XBM image file loader in GTK+. A remote attacker could provide a specially crafted XBM image file that, when opened in an application linked against GTK+ such as Nautilus, would cause the application to crash. CVE-2012-2370 This update also fixes...
gtk2 security update
CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...
Information disclosure
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
CVE-2013-0721
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
CVE-2013-0721
Affected software: WordPress WP PHP Widget Plugin, version 1.0.2. Vulnerable component: wp-php-widget.php. Issue: Full Path Disclosure via a direct request, causing an error message to reveal the server path. Impact: Information disclosure; no exploitation details provided in the documents. Root ...
CVE-2013-0721: Exposure of Sensitive Information to an Unauthorized Actor
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
PT-2013-2559
Name of the Vulnerable Software and Affected Versions WP PHP widget plugin version 1.0.2 Description The issue allows remote attackers to obtain sensitive information via a direct request. This is achieved by revealing the full path in an error message. No information is available about the...
Comodo Internet Security authentication bypass
It's possible to access settings without enteing password if desktop widget is enabled...
WordPress WP PHP Widget Plugin <= 1.0.2 - Full Path Disclosure
This vulnerability is in the wp-php-widget.php. It allows the attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Solution Update the plugin...
Wordpress Themes grou-random-image-widget Full Path Disclosure
Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- grou-random-image-widget Full Path Disclosure vulnerability ------------------------------------------------------------------------------- Autho...
Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability
Document Title: =============== Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=774 Release Date: ============= 2012-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 7...
PT-2012-3812
Name of the Vulnerable Software and Affected Versions BuddyPress plugin versions 1.5.x through 1.5.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in an activity widget filter action. Recommendations For BuddyPress plugin...
WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities
Advisory: WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities Advisory ID: SSCHADV2012-016 Author: Stefan Schurtz Affected Software: Successfully tested on Quick Post Widget 1.9.1 Vendor URL: http://qpw.famvanakkeren.nl/ Vendor Status: informed CVE-ID:...
Fedora Update for vte FEDORA-2012-9575
Check for the Version of vte OpenVAS Vulnerability Test Fedora Update for vte FEDORA-2012-9575 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
WordPress Plugin Rich Widget - Arbitrary File Upload
source: https://www.securityfocus.com/bid/55174/info The Rich WidgetPlugin for WordPress is prone to an arbitrary file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access...