CVE-2015-1402

CVE-2015-1402 affects the TYPO3 Content Rating extension (version 1.0.3 and earlier). The root cause is improper input handling, enabling cross-site scripting (XSS) via unspecified vectors and, per TYPO3 bulletins, potential SQL injection. Impact is listed as XSS with partial integrity exposure a...

CVE-2015-1404

TYPO3 Content Rating Extbase extension (content_rating_extbase) vulnerable: versions 2.0.3 and older are affected. Root cause is improper escaping of user input in HTML and SQL contexts, enabling Cross-Site Scripting (XSS) and SQL Injection as described in TYPO3 security bulletin TYPO3-EXT-SA-201...

CVE-2015-1403

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

WordPress Plugin GD Star Rating SQL Injection Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.GD Star Rating plugin is a rating and voting plugin. WordPress plugin GD Star Rating SQL injection vulnerability. Due ...

CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

Sql injection

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

CVE-2014-2839

The CVE-2014-2839 entry concerns the WordPress GD Star Rating plugin, affected version 19.22. The vulnerability is a SQL injection in the s parameter of the gd-star-rating-stats page (wp-admin/admin.php), allowing a remote administrator to execute arbitrary SQL commands. This is rooted in insuffi...

CVE-2014-2838

CVE-2014-2838 affects the WordPress plugin GD Star Rating (v19.22). The vulnerability set includes CSRF that can hijack administrator authentication, enabling requests that conduct (1) SQL injection via the s parameter on the gd-star-rating-stats page to wp-admin/admin.php and (2) cross-site scri...

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

TYPO3 Content Rating Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 Content Rating, which could be exploited by attackers to conduct cross-site attacks and steal cookie-based authentication...

Multiple Input Validation Vulnerabilities in TYPO3 Content Rating Extbase Extension

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. Multiple input validation vulnerabilities exist in the TYPO3 Content Rating Extbase Extension, which can be exploited by attackers to steal cookie-based authentication credential...

TYPO3 Content Rating SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. TYPO3 Content Rating suffers from a SQL injection vulnerability because it fails to properly filter user-supplied input. An attacker could exploit the vulnerability to compromise...

Multiple vulnerabilities in Content Rating Extbase (content_rating_extbase)

It has been discovered that the extension "Content Rating Extbase" contentratingextbase is susceptible to Cross-Site Scripting and SQL Injection. Release Date: January 9, 2015 Bulletin Update: February 23, 2015 added CVEs Component Type: Third party extension. This extension is not a part of the...

Multiple vulnerabilities in Content Rating (content_rating)

It has been discovered that the extension "Content Rating" contentrating is susceptible to Cross-Site Scripting and SQL Injection. Release Date: January 9, 2015 Bulletin Update: February 23, 2015 added CVEs Component Type: Third party extension. This extension is not a part of the TYPO3 default...

WordPress Another Classifieds Plugin - SQL Injection

This WordPress GD Star Rating plugin's "keywordphrase" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database when doing a search for classifieds. Solution...

WordPress Another Classifieds Plugin - SQL Injection

This WordPress GD Star Rating plugin's "keywordphrase" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database when doing a search for classifieds. Solution...

ESA-2014-135: RSA® Web Threat Detection SQL Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-135: RSA® Web Threat Detection SQL Injection Vulnerability EMC Identifier: ESA-2014-135 CVE Identifier: CVE-2014-4627 Severity Rating: CVSS v2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Affected Products: RSA Web Threat Detection 4.x versions...

SSL v3 Poodle security vulnerability fix recommendations-vulnerability warning-the black bar safety net

! The use of SSL to protect your website traffic far more than is on the server install an SSL certificate. Era in constant development,with the browser of aging, password strength reduction as well as attackers become more creative, the situation has undergone subtle changes. For early...