10 matches found
EUVD-2017-1565
Malware in sbrugna...
WordPress furikake plugin 0.1.0 - Unauthenticated Open Redirect vulnerability
Unauthenticated Open Redirect vulnerability found by Carl Clegg in WordPress furikake plugin version 0.1.0. Vulnerable via furikake-redirect parameter allows redirecting to an attacker controlled page. Solution We are waiting for information from the vendor...
Wordpress Furikake plugin open to redirection vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Furikake is used in one of the statistics plugin. An open redirect vulnerability exists in version 0.1.0 of the Wordpress...
CVE-2017-1000434
Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...
CVE-2017-1000434
Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...
Open redirect
Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...
CVE-2017-1000434
Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...
CVE-2017-1000434
WordPress Furikake plugin version 0.1.0 is vulnerable to an Open Redirect. The issue occurs via the furikake-redirect parameter, where the code uses header('location:'.urldecode($_GET['furikake-redirect'])) without validation, redirecting users to an attacker-controlled URL. Impact is unauthentic...
CVE-2017-1000434: URL Redirection to Untrusted Site
Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...
