CVE-2013-5672: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add a testimonial via an iNICtestimonialsave action; 2 add a listing template via an...

IndiaNIC Testimonail WP plugin - Multiple vulnerabilities

Details ======================== Application: Testimonial Version: 2.2 Type: Wordpress plugin Vendor: IndiaNIC Vulnerability: - XSS CWE-79 - CSRF CWE-352 - SQL Injection CWE-89 Description ======================== Testimonial Plugin allows you to add, delete, edit and place what others said about...

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

Details ======================== Application: Testimonial Version: 2.2 Type: Wordpress plugin Vendor: IndiaNIC Vulnerability: - XSS CWE-79 - CSRF CWE-352 - SQL Injection CWE-89 Description ======================== Testimonial Plugin allows you to add, delete, edit and place what others said about...

WordPress IndiaNIC Testimonial Plugin - Multiple Vulnerabilities

WordPress IndiaNIC Testimonial plugin is prone to multiple vulnerabilities, such as cross-site request forgery, cross-site scripting and SQL injection vulnerabilities. Solution Stop using this plugin in a public environment...

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities Details ======================== Application: Testimonial Version: 2.2 Type: Wordpress plugin Vendor: IndiaNIC Vulnerability: - XSS CWE-79 - CSRF CWE-352 - SQL Injection CWE-89 Description ======================== Testimonial Plugin...

WordPress IndiaNIC Testimonial 2.2 XSS / CSRF / SQL Injection

WordPress IndiaNIC Testimonial plugin version 2.2 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. Details ======================== Application: Testimonial Version: 2.2 Type: Wordpress plugin Vendor: IndiaNIC Vulnerability: - XSS CWE-79 -...

WordPress IndiaNIC Testimonial 2.2 XSS / CSRF / SQL Injection

Details ======================== Application: Testimonial Version: 2.2 Type: Wordpress plugin Vendor: IndiaNIC Vulnerability: - XSS CWE-79 - CSRF CWE-352 - SQL Injection CWE-89 Description ======================== Testimonial Plugin allows you to add, delete, edit and place what others said about...

Python Untrusted Search Path/Code Execution Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Python untrusted search path/code execution vulnerability Date: 7.6.12 Exploit Author: rogueclown Vendor Homepage: http://www.python.org Software Link: http://www.python.org/getit/releases/ Version: python 2.7.2 and python 3.2.1...

Design By Idealgrowth SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Title : Design By Idealgrowth SQL Injection Vulnerability Vendor :...

EFF Argues Forced Decryption Violates Fifth Amendment

Digital civil liberties organization, the Electric Frontier Foundation EFF, appealed to the U.S. District Court of Colorado arguing that encrypted personal data is covered by the Fifth Amendment’s protection against self incrimination. The group submitted a brief of Amicus Curaie .PDF last week o...

Joomla cgTestimonial 2.2 Cross Site Scripting / Shell Upload

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-08-06 X. INDEX I. ABOUT THE...