240 matches found
WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability
WordPress Google Adsense plugin version 1.29 suffers from a cross site scripting vulnerability. WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability Plugin Name : Google Adsense Effected Version : 1.29 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XS...
WordPress Google Adsense 1.29 Cross Site Scripting
Plugin Name : Google Adsense Effected Version : 1.29 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...
WordPress Google Adsense and Hotel Booking Plugin <= 1.05 - Open Redirection
The vulnerability is in the ./plugin/google-adsense-and-hotel-booking/proxy.php. It allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks. Solution Update the plugin...
Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy
Plugin is still affected and has been closed. The code in ./plugin/google-adsense-and-hotel-booking/proxy.php allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks, or DoS a site if the POST request is pointed back at itself causing a loop...
Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy
Plugin is still affected and has been closed. The code in ./plugin/google-adsense-and-hotel-booking/proxy.php allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks, or DoS a site if the POST request is pointed back at itself causing a loop...
WordPress Plugin Video Gallery 2.7 - SQL Injection
Exploit Title: WordPress Video Gallery 2.7 SQL Injection Date: 20-01-2015 Software Link: https://wordpress.org/plugins/contus-video-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $GET'vid' is not...
WordPress All in One Adsense YPN Plugin <= 2.0.1 - Cross Site Scripting
This plugin is prone to an unspecified cross site scripting vulnerability in all-in-one-adsense-&-ypn.php. Solution Update the plugin...
WordPress All in One Adsense YPN Plugin <= 2.0.1 - Cross Site Scripting
This plugin is prone to an unspecified cross site scripting vulnerability in all-in-one-adsense-&-ypn.php. Solution Update the plugin...
WordPress All in One Adsense YPN Plugin <= 2.0.1 - Security Bypass
This plugin is prone to a direct request account manipulation in all-in-one-adsense-&-ypn.php. Solution Upgrade the plugin...
Adsense Click Fraud Monitoring <= 1.7.5 - XSS
XSS via the phpwhois https://github.com/phpWhois/phpWhois component, which is also affected by a RCE apparently https://github.com/phpWhois/phpWhois/issues/34. It is unclear whether or not the issue has been fixed in the plugin...
WordPress Ad-Manager 1.1.2 Open Redirect
CVE-2014-8754 WordPress “Ad-Manager Plugin” Dest Redirect Privilege Escalation Exploit Title: WordPress Ad-Manager Plugin Dest Redirect Privilege Escalation Vulnerability Product: WordPress Ad-Manager Plugin Vendor: CodeCanyon Vulnerable Versions: 1.1.2 Tested Version: 1.1.2 Advisory Publication:...
CVE-2014-9100
Cross-site scripting XSS vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the idcode parameter in the whydoworkadsense page to wp-admin/options-general.php...
CVE-2014-9099
Cross-site request forgery CSRF vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the whydoworkadsense page in wp-admin/options-general.php...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the whydoworkadsense page in wp-admin/options-general.php...
CVE-2014-9100
Cross-site scripting XSS vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the idcode parameter in the whydoworkadsense page to wp-admin/options-general.php...
CVE-2014-9099
CVE-2014-9099 describes a CSRF vulnerability in the WordPress plugin WhyDoWork AdSense (version 1.2). The issue allows an attacker to hijack an administrator’s authenticated session via requests to the whydowork_adsense page in wp-admin/options-general.php, enabling unauthorized actions as the ad...
CVE-2014-9100
The CVE-2014-9100 entry concerns the WordPress plugin WhyDoWork AdSense v1.2, which is vulnerable to Cross-site Scripting (XSS) via the idcode parameter on the whydowork_adsense page that redirects to wp-admin/options-general.php. The root cause is unvalidated/reflected input in the idcode parame...
WordPress WhyDoWork AdSense Plugin <= 1.2 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "idcode" parameter. Solution Update the plugin...
WordPress WhyDoWork AdSense Plugin <= 1.2 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of administrators for requests. Solution Update the plugin...