63 matches found
WordPress 2.1.3 Akismet Plugin Unspecified Vulnerability
source: http://www.securityfocus.com/bid/23965/info The WordPress Akismet plugin is prone to an unspecified vulnerability. Few technical details are currently available. We will update this BID as more information emerges...
Vulnerabilities hiddenly fixed in WordPress 3.5 and 3.5.1
Hello list! Earlier I wrote about one vulnerability in WordPress, which were hiddenly fixed in version 3.5.2 http://seclists.org/fulldisclosure/2013/Jul/70 and about nine vulnerabilities in versions 3.6 and 3.6.1 http://seclists.org/fulldisclosure/2013/Nov/220. Here are new ones. These are hidden...
k2, 2.6.6, Open Folder Permissions
k2, Open folder permissions developer notice http:/getk2.org/blog/1432-k2-v267-released-akismet-integrated-new-acl-option-improved-php-54-support...
WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities
WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55749/info The Akismet plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
WordPress Akismet Plugin - Multiple Cross Site Scripting Vulnerabilities
WordPress Akismet plugin is prone to multiple cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...
WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/55749/info The Akismet plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
XSS, Redirector and CSRF vulnerabilities in WordPress
Hello 3APA3A! After seven previous vulnerabilities in Akismet, here are new holes. They take place in plugin Akismet for WordPress and it's core-plugin since version WP 2.0, so these vulnerabilities concern WordPress itself. This is the second in series of advisories concerning vulnerabilities in...
Akismet 2.5.6 Cross Site Request Forgery / Cross Site Scripting
Hello list! After seven previous vulnerabilities in Akismet, here are new holes. They take place in plugin Akismet for WordPress and it's core-plugin since version WP 2.0, so these vulnerabilities concern WordPress itself. This is the second in series of advisories concerning vulnerabilities in...
XSS, Redirector and FPD vulnerabilities in WordPress
Hello 3APA3A! In June I've disclosed vulnerabilities in WordPress, which I'd present for you. They take place in plugin Akismet for WordPress and it's core-plugin since version WP 2.0, so these vulnerabilities concern WordPress itself. This is the first in series of advisories concerning...
IAA, Redirector and XSS vulnerabilities in WordPress
Hello 3APA3A! I want to warn you about security vulnerabilities in WordPress. These are Insufficient Anti-automation, Redirector and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are WordPress 2.0 - 3.3.1. ---------- Detail...
[Full-disclosure] Wordpress Akismet XSS flaw
-------------------- CODE ----------------------------- html body form action="http://blog.url/wp-admin/plugins.php?page=akismet-key-config" method="post" id="akismet-conf" input name="wpnonce" value="'" type="text" input name="wphttpreferer"...
WordPress Akismet插件未明漏洞
WordPress是一款基于WEB的网络日志应用程序。 使用在WordPress的Akismet插件不正确处理用户提交的输入，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 WordPress 2.1.3 目前没有解决方案提供： http://wordpress.org/...
CVE-2007-2714
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors...
Code injection
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors...
CVE-2007-2714
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors...
DEBIAN-CVE-2007-2714
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors...
CVE-2007-2714
CVE-2007-2714 affects the WordPress Akismet plugin: akismet.php in Akismet before 2.0.2 contains an unspecified vulnerability with unknown impact and attack vectors. Remediation is to update the plugin (per PatchStack listing); no exploit details are provided in the documents.
CVE-2007-2714
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors...
akismet-xss.txt
-------------------- CODE ----------------------------- evalString.fromCharCode97,108,101,114,116,40,100,111,99,117,109,101,110,116,46,99,111,111,107,105,101,41" type="text" -------------------- EOC ------------------------------...