212 matches found
CVE-2019-11565
CVE-2019-11565 : The WordPress plugin Print My Blog (before 1.6.7) is vulnerable to a Server Side Request Forgery (SSRF) via the site parameter. This affects the plugin's ability to perform requests to arbitrary internal/external resources, enabling an attacker to induce requests from the WordPre...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
WordPress Print My Blog plugin <= 1.6.5 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF vulnerability found by Magnus K. Stubman in WordPress Print My Blog plugin versions = 1.6.5. Solution Update the WordPress Print My Blog plugin to the latest available version at least 1.6.6...
CVE-2019-11565: Server-Side Request Forgery (SSRF)
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
Print My Blog <= 1.6.5 - Unauthenticated Server Side Request Forgery (SSRF)
The Print My Blog – Print, PDF, & eBook Converter WordPress Plugin WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF security vulnerability...
PT-2019-12384
Name of the Vulnerable Software and Affected Versions Print My Blog plugin versions prior to 1.6.7 Description A Server Side Request Forgery SSRF issue exists, which can be exploited via the site parameter. Recommendations For versions prior to 1.6.7, update to version 1.6.7 or later to resolve t...
My Blog 1.63 BBCode HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16659/info My Blog is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplie...
EV0079.txt
New eVuln Advisory: My Blog BBCode XSS Vulnerabilities http://evuln.com/vulns/79/summary.html --------------------Summary---------------- eVuln ID: EV0079 Software: My Blog Sowtware's Web Site: http://fuzzymonkey.net/cgi-bin/download.cgi?file=blog Versions: My Blog 1.63 Critical Level: Harmless...
Cross site scripting
Cross-site scripting XSS vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an 1 img or 2 url BBcode tag...
CVE-2006-0735
Cross-site scripting XSS vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an 1 img or 2 url BBcode tag...
[eVuln] My Blog BBCode XSS Vulnerabilities
New eVuln Advisory: My Blog BBCode XSS Vulnerabilities http://evuln.com/vulns/79/summary.html --------------------Summary---------------- eVuln ID: EV0079 Software: My Blog Sowtware's Web Site: http://fuzzymonkey.net/cgi-bin/download.cgi?file=blog Versions: My Blog 1.63 Critical Level: Harmless...
[SA12729] My Blog Unspecified Cross-Site Scripting Vulnerabilities
TITLE: My Blog Unspecified Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA12729 VERIFY ADVISORY: http://secunia.com/advisories/12729/ CRITICAL: Less critical IMPACT: Unknown, Cross Site Scripting WHERE: From remote SOFTWARE: My Blog 1.x http://secunia.com/product/4001/ DESCRIPTION:...