CVE-2014-100027

CVE-2014-100027 concerns the WordPress plugin WP SlimStat. Affected software: WP SlimStat plugin for WordPress, with versions older than 3.5.6. Root cause: cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Impact (as st...

WordPress WP SlimStat Plugin <= 3.5.5 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via a crafted URL. Solution Update the plugin...

WP SlimStat 2.8.4 - wp-content/plugins/wp-slimstat/admin/view/panel1.php s Parameter XSS

The Slimstat Analytics WordPress plugin was affected by a wp-content/plugins/wp-slimstat/admin/view/panel1.php s Parameter XSS security vulnerability...

SlimStat-Ex - Open Flash Chart Arbitrary File Creation

The wp-slimstat-ex WordPress plugin was affected by an Open Flash Chart Arbitrary File Creation security vulnerability...

WP-SlimStat 0.9.2 WordPress Plugin Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26432/info WP-SlimStat Plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

WordPress WP SlimStat插件URL脚本注入漏洞

WordPress是一款内容管理系统。 由于通过URL传递的输入在被使用前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中注入并执行任意HTML和脚本代码。 0 WordPress WP SlimStat Plugin 3.5.6 厂商补丁： WordPress ----- WordPress WP SlimStat插件3.5.6版本以修复此漏洞，建议用户下载使用： http://wordpress.org/plugins/wp-slimstat/changelog/...

WordPress Slimstat Ex Code Execution Vulnerability

WordPress Slimstat Ex plugin remote PHP arbitrary code execution exploit. Exploit Title: WP plugins wp-slimstat-ex execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/wp-slimstat-ex// inurl:wp-content/plugins/wp-slimstat-ex/ Date: 03-10-2013 Exploit Author: wantexz Vendor...

WordPress Slimstat Ex Code Execution

Exploit Title: WP plugins wp-slimstat-ex execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/wp-slimstat-ex// inurl:wp-content/plugins/wp-slimstat-ex/ Date: 03-10-2013 Exploit Author: wantexz Vendor Homepage:http://wordpress.org/ Software Link: http://wordpress.org// Version...