WP Comment Remix 1.4.3 Multiple Vulnerabilities

ChX Security | Advisory 3 | ========== - "WP Comment Remix 1.4.3 Multiple Vulnerabilities" - Advisory Information | =============== Title: WP Comment Remix 1.4.3 Multiple Vulnerabilities Author: g30rg3x g30rg3xatchxsecuritydotorg Advisory URL: http://chxsecurity.org/advisories/adv-3-full.txt Date...

WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection

Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a Proof-of-Concept it was never intended to be fully functional Notes: Uses cURL / // Script Header function head print "\n WP Comment Remix...

DEBIAN-CVE-2008-3747

The 1 geteditpostlink and 2 geteditcommentlink functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie...

Sql injection

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the catid parameter in a comment action...

CVE-2008-2972

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the catid parameter in a comment action...

CVE-2008-2972

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the catid parameter in a comment action...

Diigo Toolbar and Diigolet Comment Feature - HTML Injection Information Disclosure

Diigo Toolbar and Diigolet Comment Feature - HTML Injection Information Disclosure source: https://www.securityfocus.com/bid/29611/info Diigo Toolbar and Diigolet are prone to an HTML-injection vulnerability and an information-disclosure vulnerability when handling data via the 'comment' feature...

Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure

source: https://www.securityfocus.com/bid/29611/info Diigo Toolbar and Diigolet are prone to an HTML-injection vulnerability and an information-disclosure vulnerability when handling data via the 'comment' feature. An attacker can exploit the HTML-injection issue to run arbitrary HTML and script...

CVE-2008-2698

Multiple cross-site scripting XSS vulnerabilities in photoadd-c.php aka the "add comment" section in WEBalbum 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 id, or 3 category parameter...

CVE-2008-2698: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in photoadd-c.php aka the "add comment" section in WEBalbum 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 comment, 2 id, or 3 category parameter...

webalbum-xss.txt

================================================================ WEBAlbum XSS Vulnerabilities POST Variable: id POST Variable: category Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, Win7dos, JabAv0C...

GV PostScript Viewer Remote Buffer overflow Exploit (2)

No description provided by source. there are at least 4 other stack buffer overflows, and 2 heap overflows. the first exploit i wrote exploited the one in the GLSA, and this one exploits that hole and four other ones as well. all of these are in the psscan function located in the ps.c file: 'grep...

Authentication flaw

admin.php in Multi-Page Comment System MPCS 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1...

CVE-2008-2293

admin.php in Multi-Page Comment System MPCS 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1...

CVE-2008-2293

The CVE-2008-2293 issue affects Multi-Page Comment System (MPCS) 1.0 and 1.1, where remote attackers can bypass authentication and escalate privileges by setting the CommentSystemAdmin cookie to 1. The available sources describe an authentication bypass via a cookie manipulation, marking it as a ...

CVE-2008-2293

admin.php in Multi-Page Comment System MPCS 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1...

CVE-2008-2293: Undefined Security Weakness

admin.php in Multi-Page Comment System MPCS 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1...

Multi-Page Comment System 1.1.0 - Insecure Cookie Handling

Multi-Page Comment System 1.1.0 - Insecure Cookie Handling --==+================================================================================+==-- --==+ Multi-Page Comment System 1.1.0 Insecure Cookie Handling +==--...

Multi-Page Comment System 1.1.0 - Insecure Cookie Handling

--==+================================================================================+==-- --==+ Multi-Page Comment System 1.1.0 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 15 MAY...

CVE-2008-2018

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '' and '' characters, which allows remote authenticated users to obtain sensitive information via a comment containing a macro, as demonstrated by a "user.password"...