CVE-2013-4240

The CVE-2013-4240 entry concerns the WordPress HMS Testimonials plugin, affected in versions before 2.0.11. The vulnerability set consists of multiple CSRF flaws that allow an attacker to hijack an administrator’s authenticated session and perform actions such as adding testimonials, adding group...

[RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities

Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request Forgery CWE-352 - Cross-Site Scripting CWE-79...

WordPress Hms Testimonials Plugin 2.0.10 - Multiple Vulnerabilities

Hms Testimonials plugin is prone to multiple vulnerabilities, such as cross-site scripting and cross-site request forgery vulnerabilities. Solution Update the plugin...

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner...

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities

Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request...

WordPress HMS Testimonials 2.0.10 XSS / CSRF Vulnerabilities

WordPress HMS Testimonials plugin version 2.0.10 suffers from cross site request forgery and cross site scripting vulnerabilities. Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/...

WordPress HMS Testimonials 2.0.10 XSS / CSRF

Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request...

Joomla! Component com_fss 1.9.1.1447 - SQL Injection

Exploit Title: Joomla Freestyle Support comfss sqli Dork: N/A Date: 17-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://freestyle-joomla.com Version: Version 1.9.1.1447 last update on Oct 15, 2012 License: Commercial Download: http://freestyle-joomla.com/fssdownloads Teste...

WordPress Collision Testimonials 3.0 SQL Injection

Exploit Title: WordPress Collision Testimonials plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset$GET'featQuote' $id = $GET'id'; mysqlquery"UPDATE $testimonials SET featured=1 WHERE id=$id"; ;...

WordPress Collision Testimonials plugin <= 3.0 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Collision Testimonials plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/collision-testimonials.zip Version: 3.0...

WordPress Plugin Collision Testimonials 3.0 - SQL Injection

WordPress Plugin Collision Testimonials 3.0 - SQL Injection Exploit Title: WordPress Collision Testimonials plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset$GET'featQuote' $id = $GET'id'; mysqlquery"UPDATE $testimonials SET...

WordPress Collision Testimonials Plugin <= 3.0 - SQL Injection

Collision Testimonials plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Collision Testimonials 3.0 - SQL Injection

Exploit Title: WordPress Collision Testimonials plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset$GET'featQuote' $id = $GET'id'; mysqlquery"UPDATE $testimonials SET featured=1 WHERE id=$id"; ;...

WordPress Collision Testimonials plugin <= 3.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Collision Testimonials plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset$GET'featQuote' $id = $GET'id'; mysqlquery"UPDATE $testimonials SET featured=1...

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-08-06 X. INDEX I. ABOUT THE...

Joomla! Component com_cgtestimonial 2.2 - Multiple Vulnerabilities

Joomla! Component comcgtestimonial 2.2 - Multiple Vulnerabilities cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact...

Joomla! Component com_cgtestimonial 2.2 - Multiple Vulnerabilities

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-08-06 X. INDEX I. ABOUT THE...

Joomla Component cgTestimonial 2.2 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================================== Joomla Component cgTestimonial 2.2 Multiple Remote Vulnerabilities ================================================================== cgTestimonial 2.2 Joomla Component Multipl...

Joomla Autartimonial SQL Injection

Name : Joomla comautartimonial Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://www.autartica.be/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members an...

Joomla com_ninjamonials Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla comninjamonials Blind SQL Injection Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...