1037 matches found
CVE-2012-5792
The CVE-2012-5792 entry affects the Sage Pay Direct module in osCommerce. The vulnerability arises because the module does not verify that the server hostname matches a domain name in the certificate’s CN or subjectAltName, enabling MITM attackers to spoof SSL servers using an arbitrary valid cer...
CVE-2012-5792
The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
Alliance Issues Guidance for Cloud-Based SIEM Services
The non-profit Cloud Security Alliance today released guidelines for the nascent Security as a Service SecaaS specialization within the broader realm of cloud computing. The goal, the group says, is to help companies and consumers gain a better handle on how best to evaluate, build and deploy...
CVE-2012-5350
SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...
CVE-2012-5349
Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...
Sql injection
SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...
CVE-2012-5350
CVE-2012-5350 affects the WordPress Pay With Tweet plugin (before 1.2). The vulnerability is a SQL injection in the paywithtweet shortcode, exploitable by remote authenticated users with certain permissions via the id parameter. This can lead to arbitrary SQL execution with the permissions of the...
CVE-2012-5349
Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...
CVE-2012-5349
The CVE refers to multiple stored/reflected XSS flaws in WordPress Pay With Tweet plugin’s pay.php, affects versions before 1.2. An attacker can inject arbitrary script/HTML via the link, title, or dl parameters, potentially impacting site integrity and user sessions. The issue is mitigated by up...
CVE-2012-5350
SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...
Joomla joomgalaxy 1.2.0.4 multiple defects and repair-vulnerability warning-the black bar safety net
Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites Author: Daniel Barragan "D4NB4R" Developer: http://www.joomgalaxy.com/ Affected version: 1.2.0.4 last update on Jul 2 7, 2 0 1 2 Test platform: Linuxbt5-Windows7ultimate Description Joomgalaxy is a rich, comprehensive directory component...
Trojan Dropper Uses Valid Certificate Issued For Swiss Company
A pair of trojan droppers affiliated with a pay-per-click scam are using valid digital signatures from a certificate that was issued for a Swiss company, according to a report on Securelist. Between December 2011 and March 7, 2012, the Kaspersky Security Network has detected around 5,000 instance...
Wordpress plugin Pay With a Tweet <= 1.1 a plurality of defect and repair-vulnerability warning-the black bar safety net
Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Author: Gianluca Brindisi gATbrindi. si @gbrindisi http://brindi.si/g/ Download address: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Affect version: 1.1 1 Blind SQL Injection in shortcode: Short code parameter...
WordPress Pay With Tweet Cross Site Scripting / SQL Injection
Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...
WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities
Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...
WordPress Pay with Tweet Plugin <= 1.1 - Multiple Vulnerabilities
WordPress Pay with Tweet plugin is prone to a blind SQL injection and XSS vulnerabilities. Solution Update the plugin...
WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities
WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...
Wordpress Pay With Tweet Plugin <= 1.1 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...