4646 matches found
Social Slider <= 5.6.5 - social-slider-2/ajax.php rA Parameter SQL Injection
The social-slider-2 WordPress plugin was affected by a social-slider-2/ajax.php rA Parameter SQL Injection security vulnerability...
Image slider with description - Unspecified
The Image slider with description WordPress plugin was affected by an Unspecified security vulnerability...
Really Easy Slider 0.1 - Shell Upload
The really-easy-slider WordPress plugin was affected by a Shell Upload security vulnerability...
Image News Slider 3.2 - Multiple Unspecified Remote Issues
The wp-image-news-slider WordPress plugin was affected by a Multiple Unspecified Remote Issues security vulnerability...
Simple Slider 1.0 - New Image URL Field XSS
The Simple Slider WordPress plugin was affected by a New Image URL Field XSS security vulnerability...
WordPress Slider Revolution Responsive 4.1.4 File Download
 Exploit Title : Wordpress Slider Revolution Responsive = 4.1.4 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium plugin Dork Google: revslider.php "index of" Date ...
CVE-2014-4846
Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...
CVE-2014-4846
CVE-2014-4846 refers to a Cross-Site Scripting (XSS) vulnerability in the Meta Slider (ml-slider) WordPress plugin version 2.5. The issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php. Concrete details show the affected software componen...
CVE-2014-4846
Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...
WordPress Meta Slider Plugin <= 2.5 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter to wp-admin/admin.php. Solution Update the plugin...
Web Slider 0.6 - 'slide' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
WordPress Social Slider plugin <= 5.6.5 - SQL Injection Vulnerability
No description provided by source. Exploit Title: Social Slider = 5.6.5 SQL Injection Vulnerability Date: 2011-08-05 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/social-slider-2.zip Version: 5.6.5 tested --------------- PoC PO...
Web Slider <= 0.6 Insecure Cookie/Authentication Handling Vuln
No description provided by source. --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==-- --==+================================================================================+==-- Discovered...
WordPress ml-slider 2.5 Cross Site Scripting
Exploit Title : Wordpress ml-slider 2.5 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/ml-slider Software Link : downloads.wordpress.org/plugin/ml-slider.2.5.zip Date : 2014-06-27 Tested on : Windows 7 / Mozilla Firefox Location...
Wordpress TimThumb 2.8.13 WebShot - Remote Code Execution Exploit
Exploit for php platform in category web applications | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components...
Multiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) - 'WebShot' Remote Code Execution
| | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components Exploit Author : @u0x Pichaya Morimoto Release dates :...
Drupal Nivo Slider Module模块跨站脚本漏洞
Bugtraq ID:66327 Drupal是一套开放源码的内容管理平台。 Drupal Nivo Slider模块没有正确过滤图像标题数据,允许远程攻击者利用漏洞注入恶意脚本或HTML代码,当恶意数据被查看时,可获取敏感信息或劫持用户会话。 0 Drupal Nivo Slider Module 7.x Drupal Nivo Slider Module 7.x-1.11已经修复该漏洞,建议用户下载更新: http://drupal.org/project/nivoslider...
SA-CONTRIB-2014-033 - Nivo Slider - Cross Site Scripting
Nivo Slider provides a way to showcase featured content. Nivo Slider gives administrators a simple method of adding slides to the slideshow, an administration interface to configure slideshow settings, and simple slider positioning using the Drupal block system. The module doesn't sufficiently...
Wordpress Image News slider plugin v3.5 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...