WordPress GI-Media Library Plugin <= 2.2.2 - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

OpenJPEG: Multiple vulnerabilities

Background OpenJPEG is an open-source JPEG 2000 library. Description Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted JPEG file, possibly resulting in...

[SECURITY] [DSA 3082-1] flac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3082-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 30, 2014 http://www.debian.org/security/faq -...

WordPress 3.5.2 - Media Library Multiple Function Path Disclosure

...

BSK PDF Manager < 2.9.1 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin does not sanitise the view and cattitle POST parameter when creating or editing a category /wp-admin/admin.php?page=bsk-pdf-manager, allowing authenticated users with a role as low as editor to set an XSS payload which will be triggered in the Categories list...

Xine-Lib 0.9/1 Remote Client-Side Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11969/info It is reported that the xine media library is affected by a remote buffer overflow vulnerability. This issue can allow a remote attacker to gain unauthorized access to a vulnerable computer. The overflow...

WordPress Media Library Categories plugin <= 1.0.6 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Media Library Categories = 1.0.6 SQL Injection Vulnerability Date: 2011-08-06 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/media-library-categories.1.0.6.zip Version: 1.0.6...

Xine-Lib 0.99 Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10890/info It is reported that the xine media library is affected by a remote buffer overflow vulnerability. This issue can allow a remote attacker to gain unauthorized access to a vulnerable computer. xine-lib rc-5 and...

CVE-2012-6630

Multiple cross-site scripting XSS vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 bulk parameter to media-library-categories/add.php or 2 q parameter to media-library-categories/view.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 bulk parameter to media-library-categories/add.php or 2 q parameter to media-library-categories/view.php...

CVE-2012-6630

The CVE-2012-6630 entry concerns the WordPress plugin Media Library Categories (version 1.1.1). It describes multiple XSS vulnerabilities exploitable via the bulk parameter to media-library-categories/add.php and the q parameter to media-library-categories/view.php, enabling remote attackers to i...

CVE-2012-6630

Multiple cross-site scripting XSS vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 bulk parameter to media-library-categories/add.php or 2 q parameter to media-library-categories/view.php...

WordPress Media Library Categories Plugin <= 1.1.1 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Plugin Media Library Categories - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53524/info Media Library Categories plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

WordPress Media Library Categories Plugin 'termid' Parameter SQL Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress Media Library Categories Plugin <= 1.0.6 - SQL Injection

This Media Library Categories plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Media Library Categories 1.0.6 - SQL Injection

WordPress Plugin Media Library Categories 1.0.6 - SQL Injection Exploit Title: Media Library Categories = 1.0.6 SQL Injection Vulnerability Date: 2011-08-06 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...

WordPress Plugin Media Library Categories 1.0.6 - SQL Injection

Exploit Title: Media Library Categories = 1.0.6 SQL Injection Vulnerability Date: 2011-08-06 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/media-library-categories.1.0.6.zip Version: 1.0.6 tested --- PoC ---...

Media Library Categories <= 1.0.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Media Library Categories = 1.0.6 SQL Injection Vulnerability Date: 2011-08-06 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/media-library-categories.1.0.6.zip...

CVE-2010-2009

Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party...