Lucene search
+L

254 matches found

Prion
Prion
added 2015/01/21 3:28 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

4.3CVSS6.3AI score0.02346EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2015/01/21 3:0 p.m.41 views

CVE-2015-1204

Summary: WP Slimstat for WordPress is affected by a Cross-Site Scripting (XSS) vulnerability in the Save Filters functionality. The issue allows an attacker to inject arbitrary script or HTML via the fs[resource] parameter on the wp-slim-view-2 page (to wp-admin/admin.php). Affected versions: bef...

4.3CVSS6AI score0.02346EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2015/01/21 12:0 a.m.25 views

WordPress Slimstat Plugin <= 3.9.1 - XSS

This vulnerability is in the Save Filters functionality. It allows the attackers to inject arbitrary web script or HTML via the "fsresource" parameter. Solution Update the plugin...

4.3CVSS3.7AI score0.02346EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2015/01/13 3:59 p.m.18 views

CVE-2014-100027

Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.3CVSS5.7AI score0.02023EPSS
SaveExploits1References4
Prion
Prion
added 2015/01/13 3:59 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.3CVSS6.2AI score0.02023EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2015/01/13 3:0 p.m.23 views

CVE-2014-100027

Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

5.7AI score0.02023EPSS
SaveExploits1References4
CVE
CVE
added 2015/01/13 3:0 p.m.46 views

CVE-2014-100027

CVE-2014-100027 concerns the WordPress plugin WP SlimStat. Affected software: WP SlimStat plugin for WordPress, with versions older than 3.5.6. Root cause: cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Impact (as st...

4.3CVSS5.9AI score0.02023EPSS
SaveExploits1References4Affected Software1
Patchstack
Patchstack
added 2015/01/13 12:0 a.m.12 views

WordPress WP SlimStat Plugin <= 3.5.5 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via a crafted URL. Solution Update the plugin...

4.3CVSS2.6AI score0.02023EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.5 views

WP SlimStat 2.8.4 - wp-content/plugins/wp-slimstat/admin/view/panel1.php s Parameter XSS

The Slimstat Analytics WordPress plugin was affected by a wp-content/plugins/wp-slimstat/admin/view/panel1.php s Parameter XSS security vulnerability...

2.3AI score
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.11 views

SlimStat-Ex - Open Flash Chart Arbitrary File Creation

The wp-slimstat-ex WordPress plugin was affected by an Open Flash Chart Arbitrary File Creation security vulnerability...

2.3AI score
SaveExploits0References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

WP-SlimStat 0.9.2 WordPress Plugin Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26432/info WP-SlimStat Plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/03/13 12:0 a.m.15 views

WordPress WP SlimStat插件URL脚本注入漏洞

WordPress是一款内容管理系统。 由于通过URL传递的输入在被使用前没有正确过滤,攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中注入并执行任意HTML和脚本代码。 0 WordPress WP SlimStat Plugin 3.5.6 厂商补丁: WordPress ----- WordPress WP SlimStat插件3.5.6版本以修复此漏洞,建议用户下载使用: http://wordpress.org/plugins/wp-slimstat/changelog/...

7.1AI score
SaveExploits0
zdt
zdt
added 2013/10/04 12:0 a.m.28 views

WordPress Slimstat Ex Code Execution Vulnerability

WordPress Slimstat Ex plugin remote PHP arbitrary code execution exploit. Exploit Title: WP plugins wp-slimstat-ex execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/wp-slimstat-ex// inurl:wp-content/plugins/wp-slimstat-ex/ Date: 03-10-2013 Exploit Author: wantexz Vendor...

8.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2013/10/03 12:0 a.m.27 views

WordPress Slimstat Ex Code Execution

Exploit Title: WP plugins wp-slimstat-ex execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/wp-slimstat-ex// inurl:wp-content/plugins/wp-slimstat-ex/ Date: 03-10-2013 Exploit Author: wantexz Vendor Homepage:http://wordpress.org/ Software Link: http://wordpress.org// Version...

0.3AI score
SaveExploits0
Rows per page
Query Builder