EUVD-2011-5125

Malware in sbrugna...

EUVD-2011-5124

Malware in sbrugna...

EUVD-2011-5126

Malware in sbrugna...

CVE-2011-5226

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

CVE-2011-5225

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Sql injection

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

Cross site scripting

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-5224

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-5225

Cross-site scripting XSS vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-5226

CVE-2011-5226: A CSRF flaw in wordpress_sentinel.php of the WordPress Sentinel plugin (version 1.0.0) allows remote attackers to hijack an administrator’s session by crafting requests that trigger snapshots. This affects the Sentinel plugin for WordPress; exploitation context and in-the-wild deta...

CVE-2011-5225

CVE-2011-5225 affects the WordPress Sentinel plugin (v1.0.0). The vulnerability is an XSS in wordpress_sentinel.php that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Impact is reflected in the NVD entry with a base score of 4.3 (Medium); confidentiality rema...

CVE-2011-5226

Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...

CVE-2011-5224

CVE-2011-5224 describes an SQL injection vulnerability in the WordPress Sentinel plugin, version 1.0.0. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Sentinel plugin for WordPress (1.0.0). Root cause: unsafeguarded SQL handling in ...

WordPress Sentinel Plugin <= 1.0.0 - CSRF

Because of this vulnerability in wordpresssentinel.php, the attackers can hijack the authentication of an administrator for requests that trigger snapshots. Solution Update the plugin...

WordPress Sentinel Plugin <= 1.0.0 - SQL iNJECTION

Because of this vulnerability, the attackers can execute arbitrary SQL commands via unspecified vectors. Solution Update the plugin...

PT-2012-2202

Name of the Vulnerable Software and Affected Versions Sentinel plugin version 1.0.0 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The exact vectors used for the injection are not specified...

PT-2012-2201

Name of the Vulnerable Software and Affected Versions Sentinel plugin version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Sentinel plugin version 1.0.0, update to a version that contains a fix for this issue...