Relevanssi 2.7.2 Wordpress Plugin Stored XSS Vulnerability

No description provided by source. Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS Date: 20-2-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/relevanssi.2.7.2.zip Version: Relevanssi 2.7.2, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8 Vendor...

WordPress Relevanssi插件"category_name" SQL注入漏洞

WordPress是一款内容管理系统。 由于通过"categoryname"参数传递到index.php的输入 当"s"被设置在被用于SQL查询前未能正确过滤，攻击者可以利用漏洞通过注入任意SQL代码操纵SQL查询。 0 WordPress Relevanssi Plugin 3.3 厂商补丁： WordPress ----- WordPress Relevanssi 3.3及之后版本以修复此漏洞，建议用户下载使用： http://wordpress.org/plugins/relevanssi/changelog/...

WordPress Plugin Relevanssi - category_name SQL Injection

WordPress Plugin Relevanssi - categoryname SQL Injection source: https://www.securityfocus.com/bid/65960/info Relevanssi plugin for WordPress is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

WordPress Plugin Relevanssi - 'category_name' SQL Injection

source: https://www.securityfocus.com/bid/65960/info Relevanssi plugin for WordPress is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

WordPress Relevanssi Plugin - SQL Injection

Relevanssi plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

Wordpress Relevanssi 2.7.2 Plugin Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/relevanssi.2.7.2.zip Version: Relevanssi 2.7.2, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8...

WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting

WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS Date: 20-2-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/relevanssi.2.7.2.zip Version: Relevanssi 2.7.2, WordPress 3.0.5 Teste...

Relevanssi 2.7.2 Cross Site Scripting

Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS Date: 20-2-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/relevanssi.2.7.2.zip Version: Relevanssi 2.7.2, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8 Vendor Response: plugin author released a...

WordPress Relevanssi Plugin 2.7.2- Stored XSS

Relevanssi plugin is prone to a stored cross-site scripting vulnerability that exists because of "search Query" variable is displayed and logged unsanitized in the "User Searches" section in the admin Dashboard. This vulnerability allows an attacker to inject malicious HTML code. Solution Update ...

WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting

Exploit Title: Relevanssi User Searches WordPress plugin Stored XSS Date: 20-2-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/relevanssi.2.7.2.zip Version: Relevanssi 2.7.2, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8 Vendor Response: plugin author released a...