WordPress Plugin Uploadify Integration 0.9.6 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52944/info Uploadify Integration plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...

WordPress Plugin Uploadify Integration 0.9.6 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Uploadify Integration 0.9.6 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52944/info Uploadify Integration plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplie...

WordPress Uploadify Integration Plugin 0.9.6 - Multiple Cross Site Scripting Vulnerabilities

WordPress Uploadify Integration plugin is prone to multiple cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

CVE-2011-3841

The CVE-2011-3841 entry concerns the WordPress WP Symposium plugin vulnerability: a Cross-Site Scripting (XSS) flaw in the file uploadify/get_profile_avatar.php that allows arbitrary script/HTML injection via the uid parameter. Affected versions are before 11.12.08. Root cause: input handling in ...

WordPress Symposium Plugin <= 11.12.07 - XSS

Because of this vulnerability in uploadify/getprofileavatar.php, the attackers can inject arbitrary web script or HTML via the "uid" parameter. Solution Update the plugin...

WordPress Uploadify Plugin 1.0 Remote File Upload

GotGeek Labs http://www.gotgeek.com.br/ WordPress Uploadify Plugin 1.0 Remote File Upload + Description Adds a shortcode to embed the necessary elements to use Uploadify in a page or post which will give your website visitors the ability to upload large files. By default the files will be uploade...

WordPress Uploadify 1.0 Shell Upload

GotGeek Labs http://www.gotgeek.com.br/ WordPress Uploadify Plugin 1.0 Remote File Upload + Description Adds a shortcode to embed the necessary elements to use Uploadify in a page or post which will give your website visitors the ability to upload large files. By default the files will be uploade...

VulnCheck KEV: CVE-2011-10041

Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in processupload.php due to missing file type validation. An unauthenticated remote attacker can upload arbitrary files to the affected WordPress site, which may allow remote code execution...

Uploadify 1.0 - Unauthenticated Arbitrary File Upload

This vulnerability has been seen exploited in the wild...

WordPress Uploader 1.0.0 Shell Upload

------------------------------------------------------------------------ Software................WordPress Uploader 1.0.0 Vulnerability...........Arbitrary Upload Download................http://wordpress.org/extend/plugins/uploader/ Release Date............1/24/2011 Tested On...............Window...

WordPress Database Interface Toolkit 0.1.7 Shell Upload

------------------------------------------------------------------------ Software................WordPress Database Interface Toolkit 0.1.7 Vulnerability...........Arbitrary Upload Download................http://dbtoolkit.digilab.co.za/ Release Date............11/5/2010 Tested...

Uploadify Sample Collection Shell Upload

======================================================================================== | Title : Uploadify Sample Collection Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4...

Uploadify Sample Collection Shell Upload Vulnerability

Exploit for unknown platform in category web applications ====================================================== Uploadify Sample Collection Shell Upload Vulnerability ======================================================...

Uploadify Sample Collection - Arbitrary File Upload

======================================================================================== | Title : Uploadify Sample Collection Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4...

jQuery uploadify v2.1.0 Remote File Upload

No description provided by source. Exploit Title: jQuery uploadify v2.1.0 Remote File Upload Date: 21/01/2010 Author: k4cp3r/Ablus Version: v2.1.0 uploadify.swf Actionscript: function setAllowedTypes:void allowedTypes = ; if param.fileDesc && param.fileExt var fileDescs:Array =...

jQuery uploadify v2.1.0 Remote File Upload

Exploit for unknown platform in category web applications ========================================== jQuery uploadify v2.1.0 Remote File Upload ========================================== Exploit Title: jQuery uploadify v2.1.0 Remote File Upload Date: 21/01/2010 Author: k4cp3r/Ablus Version: v2.1....

jQuery Uploadify 2.1.0 - Arbitrary File Upload

Exploit Title: jQuery uploadify v2.1.0 Remote File Upload Date: 21/01/2010 Author: k4cp3r/Ablus Version: v2.1.0 uploadify.swf Actionscript: function setAllowedTypes:void allowedTypes = ; if param.fileDesc && param.fileExt var fileDescs:Array = param.fileDesc.split'|'; var fileExts:Array =...