53 matches found
WordPress plugin ILC Thickbox 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-38606 · WordPress · Ilc Thickbox
Name of the Vulnerable Software and Affected Versions: ILC Thickbox WordPress plugin version 1.0 Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations: For ILC...
WordPress ILC Thickbox plugin <= 1.0 - Settings update via CSRF vulnerability
Settings update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin ILC Thickbox versions = 1.0...
WordPress ILC Thickbox Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software ILC Thickbox Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7820 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8fc91133c266 Credits Daniel Ruf Required privile...
CVE-2015-9396
The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS...
CVE-2015-9396
The CVE-2015-9396 entry documents a reflected XSS in the WordPress plugin Auto ThickBox Plus (
WordPress Auto ThickBox Plus插件跨站脚本漏洞
No description provided by source...
WordPress Auto ThickBox Plus Plugin Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Auto ThickBox Plus is one of the thumbnail plugins used to automate the implementation of ThickBox. A cross-site scripting...
WordPress Auto ThickBox Plus Plugin <= 1.9 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting (XSS)
The auto-thickbox-plus WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/auto-thickbox-plus/download.min.php?file=%3Cscript%3Ealert%281%29%3C/script%3E...
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting (XSS)
The auto-thickbox-plus WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/auto-thickbox-plus/download.min.php?file=%3Cscript%3Ealert%281%29%3C/script%3E...
WordPress Auto ThickBox Plus Plugin <= 1.9 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Manage Calameo Publications Plugin <= 1.1.0 - Reflected XSS
This plugin is prone to a cross site scripting vulnerability in thickboxcontent.php attachmentid parameter. Solution Update the plugin...
WordPress Manage Calameo Publications Plugin <= 1.1.0 - Reflected XSS
This plugin is prone to a cross site scripting vulnerability in thickboxcontent.php attachmentid parameter. Solution Update the plugin...
Thickbox Gallery 2 - (index.php ln) Local File Inclusion Vulnerability
No description provided by source. + Thickbox Gallery v2 Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion PoC : http://127.0.0.1/path/index.php?ln=../../../../../../BOOTSECT.BAK%00 milw0rm.com 2009-04-27...
Thickbox Gallery 2.0 - (admins.php) Admin Data Disclosure Vulnerability
No description provided by source. + Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted...
CVE-2009-1625
Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ln parameter...
Directory traversal
Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ln parameter...
CVE-2009-1625
The vulnerability CVE-2009-1625 affects Thickbox Gallery 2: a directory traversal in index.php allows remote attackers to include and execute arbitrary local files via .. in the ln parameter. Reported impact per CVSS: partial confidentiality, integrity, and availability with network attack vector...
