Lucene search
+L

37 matches found

CNVD
CNVD
added 2015/02/11 12:00 a.m.4 views

WordPress Plugin Google Doc Embedder 'options-general.php' HTML Injection Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. An HTML injection vulnerability in the WordPress plugin Google Doc Embedder 'options-general.php' allows attackers to run supplied HTML and script code or steal...

7.3AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2015/02/09 12:00 a.m.26 views

WordPress Google Doc Embedder 2.5.18 Cross Site Scripting

Title: WordPress 'Google Doc Embedder' plugin - XSS Version: 2.5.18 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/google-document-embedder/ Contacted WordPress: 2015/01/26 ==========================================================...

7.4AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2014/12/03 11:56 a.m.19 views

Google Document Embedder <= 2.5.16 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS7.3AI score0.05021EPSS
SaveExploits4References1Affected Software1
NVD
NVD
added 2014/12/02 4:59 p.m.17 views

CVE-2014-9173

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

7.5CVSS8.4AI score0.05021EPSS
SaveExploits4References5
Prion
Prion
added 2014/12/02 4:59 p.m.18 views

Sql injection

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

7.5CVSS9.2AI score0.05021EPSS
SaveExploits4References5Affected Software1
Cvelist
Cvelist
added 2014/12/02 4:00 p.m.30 views

CVE-2014-9173

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

8.4AI score0.05021EPSS
SaveExploits4References5
CVE
CVE
added 2014/12/02 4:00 p.m.58 views

CVE-2014-9173

Affected software: WordPress Google Doc Embedder plugin. Vulnerability: SQL injection in view.php via the gpid parameter. Versions: affected up to 2.5.15 (e.g., before 2.5.15; 2.5.14 noted in sources). Impact: remote attackers could execute arbitrary SQL commands. Root cause: unsafeguarded gpid u...

7.5CVSS8.7AI score0.05021EPSS
SaveExploits4References5Affected Software1
WPVulnDB
WPVulnDB
added 2014/11/25 5:23 p.m.23 views

Google Document Embedder <= 2.5.14 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS7.3AI score0.05021EPSS
SaveExploits4References3Affected Software1
exploitpack
exploitpack
added 2014/11/25 12:00 a.m.13 views

WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection

WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection Exploit Title: Google Doc Embedder 2.5.14 SQL Injection Date: 10-11-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl http://twitter.com/KacperSzurek Software Link:...

0.1AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.22 views

Google Document Embedder 2.4.6 - pdf.php file Parameter Arbitrary File Disclosure

The Google Doc Embedder WordPress plugin was affected by a pdf.php file Parameter Arbitrary File Disclosure security vulnerability...

5CVSS6.3AI score0.50017EPSS
SaveExploits4References4Affected Software1
NVD
NVD
added 2014/05/29 2:19 p.m.19 views

CVE-2012-4915

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...

5CVSS6.7AI score0.50017EPSS
SaveExploits4References4
Prion
Prion
added 2014/05/29 2:19 p.m.20 views

Directory traversal

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...

5CVSS7.2AI score0.50017EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
added 2014/05/29 2:00 p.m.37 views

CVE-2012-4915

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...

6.7AI score0.50017EPSS
SaveExploits4References4
CVE
CVE
added 2014/05/29 2:00 p.m.68 views

CVE-2012-4915

CVE-2012-4915 affects the Google Doc Embedder Plugin for WordPress. A directory-traversal in libs/pdf.php allows remote reading of arbitrary files via .. in the file parameter. Affected plugin versions are older than 2.5.4. Mitigation is to upgrade to 2.5.4 or later (or apply vendor-provided fixe...

5CVSS6.8AI score0.50017EPSS
SaveExploits4References4Affected Software1
Check Point Advisories
Check Point Advisories
added 2013/06/18 12:00 a.m.30 views

WordPress Plugin Google Document Embedder Arbitrary File Disclosure (CVE-2012-4915)

A remote code execution vulnerability has been reported in Google Doc Embedder Plugin for WordPress...

5CVSS7.3AI score0.50017EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2013/01/24 12:00 a.m.80 views

Google Doc Embedder Plugin for WordPress 'File' Parameter Traversal Arbitrary File Disclosure

The Google Doc Embedder Plugin for WordPress installed on the remote host is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'file' parameter of the 'libs/pdf.php' script. This vulnerability could allow an unauthenticated, remote attack...

5CVSS5.8AI score0.50017EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2013/01/08 12:00 a.m.39 views

WordPress Google Doc Embedder Plugin Arbitrary File Disclosure Vulnerability

The Google Doc Embedder Plugin for WordPress is prone to an arbitrary file-disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

5CVSS6.5AI score0.50017EPSS
SaveExploits4References1
Rows per page
Query Builder