CVE-2018-5287

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page...

CVE-2018-5287

CVE-2018-5287 affects the WordPress GD Rating System plugin, version 2.3. A directory traversal flaw exists in the wp-admin/admin.php parameter for the gd-rating-system-about page, enabling an attacker to read arbitrary files on the server. Public CVSS metrics show base scores of 5.0 (NVD CVSS2) ...

CVE-2018-5292

The CVE-2018-5292 entry applies to WordPress GD Rating System plugin version 2.3, where an XSS vulnerability exists in the gd-rating-system-information page. The flaw is triggered by XSS via the wp-admin/admin.php panel parameter, enabling arbitrary script injection. Affected product: GD Rating S...

CVE-2018-5286

The WordPress GD Rating System plugin version 2.3 is affected by an XSS vulnerability in the gd-rating-system-about page, exploitable via the wp-admin/admin.php parameter. The CVE notes a cross-site scripting issue with I=P and Gained impact mainly on integrity, with no explicit exploit details p...

CVE-2018-5292

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

CVE-2018-5290

The CVE-2018-5290 entry concerns WordPress GD Rating System plugin version 2.3, which suffers a directory traversal vulnerability in the gd-rating-system-transfer path via wp-admin/admin.php. This allows reading arbitrary files on the server (CNVD/OpenVAS details; CVSSv3 base 7.5, high). Patch st...

CVE-2018-5289

The CVE-2018-5289 entry concerns WordPress GD Rating System plugin version 2.3, which exposes a Directory Traversal vulnerability in the wp-admin/admin.php parameter for the gd-rating-system-information page. The CNVD/OpenVAS records corroborate a traversal flaw that can enable reading arbitrary ...

CVE-2018-5289

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

GD Rating System 2.3 - Multiple Vulnerabilities

The GD Rating System WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

CVE-2018-5291: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...

CVE-2018-5293: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...

CVE-2018-5288: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

WordPress GD Rating System Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.GD Rating System plugin is used in one of the rating plugin. A cross-site scripting vulnerability exists in version...

CVE-2018-5289: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

CVE-2018-5292: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

CVE-2018-5290: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

CVE-2018-5286: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page...

CVE-2018-5287: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page...

Oracle Linux 7 : php (ELSA-2017-3221)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3221 advisory. - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx CVE-2016-10167 Tenable has extracted the preceding description block directly from the Oracle...

gd: Integer overflow in gd_io.c

An integer overflow flaw, leading to a heap-based buffer overflow was found in the way libgd read some specially-crafted gd2 files. A remote attacker could use this flaw to crash an application compiled with libgd or in certain cases execute arbitrary code with the privileges of the user running...