WordPress Plugin Lazy SEO 1.1.9 - Arbitrary File Upload

WordPress Plugin Lazy SEO 1.1.9 - Arbitrary File Upload Exploit Title : Wordpress Lazy SEO plugin Shell Upload Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lazy-seo/ Date: 2013/09/21 Vendor Homepage : http://wordpress.org/plugins/lazy-seo...

WordPress Plugin Lazy SEO 1.1.9 - Arbitrary File Upload

Exploit Title : Wordpress Lazy SEO plugin Shell Upload Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lazy-seo/ Date: 2013/09/21 Vendor Homepage : http://wordpress.org/plugins/lazy-seo Software Link :...

WordPress Lazy SEO Plugin 1.1.9 - Shell Upload

This Lazy SEO plugin is prone to a shell upload vulnerability, in which the administrator or author could upload shell script, in the other words, default settings. Solution Update the plugin...

WordPress Platinum SEO Plugin <= 1.3.7 - XSS

Because of this vulnerability in platinumseopack.php, the attackers can inject arbitrary web script or HTML via the "s" parameter. Solution Update the plugin...

Yoast SEO 1.14.15 Cross Site Scripting

Discussion: Yoast SEO Plugin v1.14.15 has a xss vulnerability due to lack of search sanitation. Exploit: This can be exploited with a browser and is usually executed inside the search parameter of the website. Proof of concept: http://5linx.com/?s="alertdocument.cookie;...

CVE-2013-4871

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-4871

CVE-2013-4871 affects the TEQneers SEO Enhancements (tq_seo) extension for TYPO3, specifically versions prior to 5.0.1. The vulnerability is a Cross-site Request Forgery (CSRF) that could allow remote attackers to hijack user authentication via unknown vectors. The vulnerability originates in the...

CVE-2013-4871

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-4719

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4719

CVE-2013-4719 is a SQL injection vulnerability in the TYPO3 SEO Pack’s tt_news extension, affecting versions prior to 1.3.3. The weakness allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is the TYPO3 SEO Pack for tt_news; the exact root cause de...

Scriptalicious Pro Cross Site Scripting

Exploit Title: Scriptalicious Pro Cross Site Scripting Date: 06/01/2013 Author: Nikhalesh Singh Bhadoria Twitter: @nikhaleshsingh Download Link: scriptalicious.com Versions Affected: All Category:Xss...

PHP weby directory software 1.2 - Multiple Vulnerabilities

=========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Powered by PHP weby software...

PHP weby directory software 1.2 - Multiple Vulnerabilities

PHP weby directory software 1.2 - Multiple Vulnerabilities =========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Power...

PHP Weby Directory Software 1.2 SQL Injection / Cross Site Request Forgery

=========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Powered by PHP weby software...

WordPress SEO Plugin 1.3.11 Cross Site Script Vulnerability

WordPress out of the box is already technically quite a good platform for SEO, this was true when I wrote my original WordPress SEO article in 2008 and it's still true today, but that doesn't mean you can't improve it further! This plugin is written from the ground up by WordPress SEO consultant...

CVE-2012-5888

Cross-site scripting XSS vulnerability in Basic SEO Features seobasics extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Basic SEO Features seobasics extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5888

Cross-site scripting XSS vulnerability in Basic SEO Features seobasics extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...