16 matches found
EUVD-2011-5156
Malware in sbrugna...
CVE-2011-5257
Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...
Classipress <= 3.1.4 - Stored XSS
The classipress WordPress theme was affected by a Stored XSS security vulnerability...
wordpress classipress theme <= 3.1.4 - Stored XSS
No description provided by source. Exploit Title: WordPress Classipress Theme = 3.1.4 Stored XSS Date: 2011-09-26 Author: Paul Loftness Contact:http://attackvectorlabs.blogspot.com Vendor: Appthemes LLc. Product Web Page: http://www.appthemes.com/themes/classipress/ Version: =3.1.4 Tested Version...
CVE-2011-5257
Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...
CVE-2011-5257
Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...
CVE-2011-5257
Classipress (WordPress theme) before 3.1.5 is affected by multiple XSS vulnerabilities via twitter_id and facebook_id widget parameters, and similar stored XSS risk via POST facebook_id/twitter_id in user profiles (
CVE-2011-5257: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...
PT-2013-1472
Name of the Vulnerable Software and Affected Versions Classipress theme versions prior to 3.1.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via the twitter id parameter related to the Twitter widget and the facebook id parameter related to the Facebook...
WordPress Classipress Theme <= 3.1.4 Stored XSS
No description provided by source. Exploit Title: WordPress Classipress Theme = 3.1.4 Stored XSS Date: 2011-09-26 Author: Paul Loftness Contact:http://attackvectorlabs.blogspot.com Vendor: Appthemes LLc. Product Web Page: http://www.appthemes.com/themes/classipress/ Version: =3.1.4 Tested Version...
WordPress Classipress Theme <= 3.1.4 - Stored XSS
Classipress theme is prone to a stored cross-site scripting vulnerability because of input failure through the POST parameters 'facebookid' and 'twitterid' in a registered user's profile page. It allows an attacker to inject Javascript code. Solution Update the theme...
WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting
WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting Exploit Title: WordPress Classipress Theme = 3.1.4 Stored XSS Date: 2011-09-26 Author: Paul Loftness Contact:http://attackvectorlabs.blogspot.com Vendor: Appthemes LLc. Product Web Page: http://www.appthemes.com/themes/classipres...
WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting
Exploit Title: WordPress Classipress Theme alert'X...
WordPress Classipress Theme 3.1.4 Cross Site Scripting
Exploit Title: WordPress Classipress Theme = 3.1.4 Stored XSS Date: 2011-09-26 Author: Paul Loftness Contact:http://attackvectorlabs.blogspot.com Vendor: Appthemes LLc. Product Web Page: http://www.appthemes.com/themes/classipress/ Version: =3.1.4 Tested Versions: 3.1.4, 3.0.5.3 Summary:...
WordPress Classipress Theme <= 3.1.4 Stored XSS
Exploit for php platform in category web applications Exploit Title: WordPress Classipress Theme = 3.1.4 Stored XSS Date: 2011-09-26 Author: Paul Loftness Contact:http://attackvectorlabs.blogspot.com Vendor: Appthemes LLc. Product Web Page: http://www.appthemes.com/themes/classipress/ Version:...