Cross site scripting

Cross-site scripting XSS vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendshiprequestmessage parameter to...

CVE-2013-4944

The CVE-2013-4944 issue affects the WordPress plugin BuddyPress Extended Friendship Request (versions before 1.0.2). When the Friend Connections component is enabled, an XSS flaw exists in the friendship_request_message parameter passed to wp-admin/admin-ajax.php, enabling remote script/HTML inje...

CVE-2013-4944

Cross-site scripting XSS vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendshiprequestmessage parameter to...

WordPress BuddyPress Extended Friendship Request Plugin <= 1.0.1 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "friendshiprequestmessage" parameter. Solution Update the plugin...

CVE-2013-4944: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendshiprequestmessage parameter to...

XSS and CS vulnerabilities in BuddyPress for WordPress

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in plugin BuddyPress for WordPress. I've disclosed vulnerabilities in JW Player in June and August including in commercial version JW Player Pro and disclosed vulnerabilities in Rokbox in December. And BuddyPress uses this...

CS and XSS vulnerabilities in BuddyPress for WordPress

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in plugin BuddyPress for WordPress. I've disclosed vulnerabilities in JW Player in June and August including in commercial version JW Player Pro and disclosed vulnerabilities in Rokbox in December. And BuddyPress uses this...

WordPress BuddyPress Cross Site Scripting / Content Spoofing

Hello list! I want to warn you about multiple security vulnerabilities in plugin BuddyPress for WordPress. I've disclosed vulnerabilities in JW Player in June and August including in commercial version JW Player Pro and disclosed vulnerabilities in Rokbox in December. And BuddyPress uses this...

CVE-2012-2109

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activitywidgetfilter action...

Sql injection

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activitywidgetfilter action...

CVE-2012-2109

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activitywidgetfilter action...

CVE-2012-2109

The CVE-2012-2109 entry relates to a SQL injection in the BuddyPress WordPress plugin (1.5.x before 1.5.5) triggered via the page parameter in an activity_widget_filter action. Affected component is BuddyPress plugin for WordPress; root cause is unsafely constructed SQL from user-controllable inp...

CVE-2012-2109: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activitywidgetfilter action...

SQL injection in Wordpress plugin Buddypress

Hi, I would like disclosure SQL injection vulnerability if Buddypress plugin affecting last versions. This issue was reported to developers and resolved in 1.5.5 version. So, I suggest all having this plugin in their blogs update to last version, if you haven't done it yet. Example of POST messag...

WordPress Buddypress SQL Injection

Hi, I would like disclosure SQL injection vulnerability if Buddypress plugin affecting last versions. This issue was reported to developers and resolved in 1.5.5 version. So, I suggest all having this plugin in their blogs update to last version, if you haven't done it yet. Example of POST messag...

Wordpress plugin Buddypress remote SQL injection and fix-vulnerability warning-the black bar safety net

Title: Buddypress plugin of Wordpress remote SQL Injection Author: Ivan Terkin Type: Remote Exploit Vulnerability: Remote SQL Injection Software download address: buddypress.org Affects versions: 1.5.5 and below Test platform: Buddypress 1.5.4 POST /wp-load.php HTTP/1.1 User-Agent: Mozilla Host:...

WordPress Plugin BuddyPress Plugin 1.5.x < 1.5.5 - SQL Injection

Exploit Title: Buddypress plugin of Wordpress remote SQL Injection Date: March 31, 2012 Author: Ivan Terkin Exploitation: Remote Exploit Bug: Remote SQL Injection Software Link: buddypress.org Version: till 1.5.5 Tested on: Buddypress 1.5.4 POST /wp-load.php HTTP/1.1 User-Agent: Mozilla Host:...

WordPress Plugin BuddyPress Plugin 1.5.x 1.5.5 - SQL Injection

WordPress Plugin BuddyPress Plugin 1.5.x 1.5.5 - SQL Injection Exploit Title: Buddypress plugin of Wordpress remote SQL Injection Date: March 31, 2012 Author: Ivan Terkin Exploitation: Remote Exploit Bug: Remote SQL Injection Software Link: buddypress.org Version: till 1.5.5 Tested on: Buddypress...

Buddypress <= 1.5.4 - SQL Injection

The BuddyPress WordPress plugin was affected by a SQL Injection security vulnerability...

Wordpress BuddyPress plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Buddypress plugin of Wordpress remote SQL Injection Date: March 31, 2012 Author: Ivan Terkin Exploitation: Remote Exploit Bug: Remote SQL Injection Software Link: buddypress.org Version: till 1.5.5 Tested on: Buddypress 1.5.4 PO...