54 matches found
CVE-2015-9358
The feedwordpress WordPress plugin prior to 2015.0514 is affected by CVE-2015-9358: an XSS flaw exploitable via manipulated query arguments using add_query_arg() and remove_query_arg(). The vulnerability is described as a cross-site scripting issue impacting the plugin before the stated release, ...
CVE-2015-9358: Improper Neutralization of Input During Web Page Generation
The feedwordpress plugin before 2015.0514 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-4018
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the linkids parameter in an Update action in the syndication.php page to wp-admin/admin.php...
Sql injection
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the linkids parameter in an Update action in the syndication.php page to wp-admin/admin.php...
CVE-2015-4018
CVE-2015-4018 is a SQL injection vulnerability in the WordPress plugin FeedWordPress (affected: versions prior to 2015.0514). The flaw is in feedwordpresssyndicationpage.class.php and allows an authenticated attacker to inject arbitrary SQL via the link_ids[] parameter in the syndication Update a...
CVE-2015-4018
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the linkids parameter in an Update action in the syndication.php page to wp-admin/admin.php...
CVE-2015-4018: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the linkids parameter in an Update action in the syndication.php page to wp-admin/admin.php...
WordPress FeedWordPress Plugin - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1...
WordPress Plugin FeedWordPress 2015.0426 - SQL Injection
WordPress Plugin FeedWordPress 2015.0426 - SQL Injection Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1...
WordPress Plugin FeedWordPress 2015.0426 - SQL Injection
Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1 Authenticated SQLi CWE-89 -------------------------------...
WordPress FeedWordPress 2015.0426 SQL Injection
Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1 Authenticated SQLi CWE-89 -------------------------------...
Unspecified SQL Injection Vulnerability in WordPress Plugin FeedWordPress
WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.FeedWordPress is a WordPress Atom/RSS aggregator. An unspecified SQL injection vulnerability exists in the WordPress plugin FeedWordPress. An attacker ca...
