WordPress Plugin RSS Feed Reader 0.1 - 'rss_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45997/info The RSS Feed Reader WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors...

Mingle Forum SQL Injection / Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors Contacted: Paul Carter - Maintainer of plugin. 2. Summary Mingle...

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors Contacted: Paul Carter - Maintainer of plugin. 2. Summary Mingle...

CVE-2010-4520

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

CVE-2010-4520

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

WordPress Twitter Feed Plugin 'url' Parameter Cross Site Scripting Vulnerability

The Twitter Feed Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Twitter Feed for WordPress Plugin 'url' Parameter XSS

The version of the Twitter Feed for WordPress plugin installed on the remote host does not sanitize input to the 'url' parameter of the 'magpie/scripts/magpiedebug.php' script before using it to generate dynamic HTML. An attacker can leverage this issue to inject arbitrary HTML or script code int...

WordPress Twitter Feed Plugin - Cross-Site Scripting Vulnerability

Twitter Feed "url" parameter plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

Twitter Feed <= 0.3.1 - XSS

The Peadig's Twitter Feed: Embedded Timeline WordPress Plugin WordPress plugin was affected by a XSS security vulnerability...

WordPress Plugin Twitter Feed - 'url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45294/info The Twitter Feed Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Vigilant Hacker-Activist Allegedly Searched and Seized

It is being reported that the internet hacker-activist calling himself the Jester who claimed responsibility for the DDoS attacks on Wikileaks Sunday has been the subject of a search and seizure by local law enforcement officials. The raid reportedly took place Monday according to a blog posted...

CVE-2010-3796

Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications...

Google Launches Phishing Alert Service

In late September, Google announced Google Safe Browsing Alerts for Network Administrators -- a tool that enables Autonomous System AS owners to receive notifications for malicious content found on their networks. For example, ISPs that host thousands of sites but don't directly control what's...

WordPress Feed List 2.61.01 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Feed List 2.61.01 Vulnerability...........Reflected Cross-site Scripting Download................http://wordpress.org/extend/plugins/feedlist/ Release Date............11/5/2010 Tested...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...

CVE-2010-3713

CVE-2010-3713 affects UseBB up to version 1.0.10. RSS feeds (rss.php) do not correctly honor read vs. view permissions: a user with view permission but lacking read permission can bypass access restrictions by reading a forum feed together with a topic feed. This exposes restricted forum content ...

CVE-2007-3010

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16857 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/alcatelomnipcxmastercgiexec.rb 2023-06-14...

Flock Browser RSS Feed Cross site scripting Vulnerability

This host is installed with Flock browser and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodflockxsswin01.nasl 5394 2017-02-22 09:22:42Z teissa $ Flock Browser RSS Feed Cross site scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod...