Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting

Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS vulnerability in Twitget 3.3.1 Vulnerability ================ I...

Monitorix HTTP Server < 3.3.1 RCE Vulnerability - Active Check

Monitorix HTTP Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

wordpress 3.3.1 /wp-includes/js/swfupload/swfupload.swf buttontText 跨站脚本漏洞

No description provided by source...

WordPress 3.3.1 swfupload.swf Cross Site Scripting

WordPress versions 2.5 through 3.3.1 suffer from a cross site scripting vulnerability in swfupload.swf. I will draw your attention to XSS vulnerability in swfupload in WordPress. In April there was announced Cross-Site Scripting vulnerability in swfupload.swf in WordPress CVE-2012-3414. It was...

Fedora Core 3 : kdewebdev-3.3.1-2.1 (2005-345)

Wed Apr 27 2005 Than Ngo 6:3.3.1-2.1 - apply patch to fix CVE-2005-0754, Kommander untrusted code execution, thanks to KDE security team - Mon Oct 18 2004 Than Ngo 6:3.3.1-2 - rebuilt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting

WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...

Limny - index.php Multiple SQL Injections

Limny - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/54753/info Limny is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to...

Limny 3.3.1 Blind SQL Injection

Exploit Title: Limny v 3.3.1 Blind SQL Injection Date: 31/7/2012 Author: L0n3ly-H34rT Homepage: http://se3c.tk/ Contact: [email protected] Software Link: http://www.limny.org/releases/limny-3.3.1.zip Tested on: Linux/Windows Example 1: http://127.0.0.1/limny-3.3.1/index.php?q=-1' or 57 = '5...

CVE-2012-3831

Cross-site scripting XSS vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to inject arbitrary web script or HTML via multiple URLs in an img tag...

kernel: thp: __split_huge_page() mapcount != page_mapcount BUG_ON()

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

PHP Decoda 3.3.1 local file containing the defect and repair-vulnerability warning-the black bar safety net

Title: php-decoda local file inclusion Author: Number 7 Software address: http://milesj.me/code/php/decoda Affected versions: 3.3.1 Test platform: linux Proof: http://www.xxxx.com/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00 Line 1 1 1 in Index.php: ? php include $view .'...

PHP Decoda 3.3.1 - Local File Inclusion

PHP Decoda 3.3.1 - Local File Inclusion Exploit Title: php-decoda local file inclusion Date: 16/06/2012 Author: Number 7 Software Link: http://milesj.me/code/php/decoda Version: 3.3.1 Tested on: linux Exp: http://localhost/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00 Line 1...

PHP Decoda 3.3.1 - Local File Inclusion

Exploit Title: php-decoda local file inclusion Date: 16/06/2012 Author: Number 7 Software Link: http://milesj.me/code/php/decoda Version: 3.3.1 Tested on: linux Exp: http://localhost/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00 Line 111 in Index.php: Blogpot:...

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-20...

WordPress 3.3.1 User Count Enumeration

TITLE ....... Wordpress 3.3.1 - users counter ..................... DATE ........ 15.02.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... http://wordpress.org................................. VERSION ..... 3.3.1...

CVE-2011-4898

CVE-2011-4898 affects WordPress 3.3.1 and earlier, in wp-admin/setup-config.php. The issue stems from different error messages returned for requests without a dbname depending on MySQL credentials, which can facilitate brute-force attempts by cycling uname/pwd across requests. The connected Nessu...

PT-2012-2868 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.3.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the dbhost, dbname, or uname parameters in the wp-admin/setup-config.php file. The vendor disputes the significance...

PT-2012-1988 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.3.1 and earlier Description: The installation component in WordPress generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid. This makes it easier fo...

WordPress <= 3.3.1 - Multiple Vulnerabilities

WordPress version 3.3.1 is prone to PHP code execution and persistent cross-site scripting vulnerabilities via "setup-config.php" page. The attackers can host their own MySQL database server and then successfully complete the WordPress installation without having any valid credentials on the targ...

PT-2011-1143 · Kde +1 · Kdelibs +2

Name of the Vulnerable Software and Affected Versions: kdelibs versions 3.3.1 through 3.5.4 kdelibs versions prior to 4.12.5-r1 KDE SC versions 4.6.0 through 4.7.1 Description: The issue allows remote attackers to exploit vulnerabilities in the kdelibs package, potentially leading to a breach of...