Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-2706

The CVE refers to a CSRF vulnerability in the Stream Video Player plugin for WordPress, version 1.4.0 and earlier. The underlying issue allows an attacker to hijack an administrator’s authenticated session to submit requests that alter plugin settings via unspecified vectors. Documented impact is...

CVE-2013-2706

Cross-site request forgery CSRF vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow

This Metasploit module exploits a buffer overflow in Total Video Player 1.3.1. The vulnerability occurs opening malformed Settings.ini file e.g."C:\Program Files\Total Video Player". This Metasploit module has been tested successfully over Windows WinXp-Sp3-EN, Windows 7, Windows 8. This module...

Total Video Player 1.3.1 Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Total Vid...

Total Video Player 1.3.1 - 'Settings.ini' Local Buffer Overflow (SEH) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in Total Vid...

Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow

This module exploits a buffer overflow in Total Video Player 1.3.1. The vulnerability occurs opening malformed Settings.ini file e.g. "C:\Program Files\Total Video Player". This module has been tested successfully on Windows WinXp-Sp3-EN, Windows 7, and Windows 8. This module requires Metasploit:...

Total Video Player Denial Of Service

Total Video Player .rmvb Local Crash P.O.C Date : 31/12/2013 Author : JoKeRStEx Software Download link : http://od.ccm2.net/www.commentcamarche.net/download/files/cnettvcc131exe Tested 0N : WINDOWS XP SP3 !/usr/bin/python Crash buffer = "\x46\x48" 2014 FK File .rmvb filename = "2014.rmvb" crash =...

WordPress Spider Video Player 2.1 Cross Site Scripting

==================================================================== Exploit Title : WordPress Spider Video Player 2.1 Cross site scripting Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://web-dorado.com/ Google Dork :...

Total Video Player 1.3.1 - Settings.ini Local Buffer Overflow (SEH)

Total Video Player 1.3.1 - Settings.ini Local Buffer Overflow SEH !/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1...

Total Video Player 1.3.1 - 'Settings.ini' Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1 http://www.effectmatrix.com/total-video-player/ Software Link:...

Olive File Manager 1.0.1 iOS - Multiple Vulnerabilities

Olive File Manager 1.0.1 iOS - Multiple Vulnerabilities Title: ====== Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities Date: ===== 2013-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1009 VL-ID: ===== 1009 Common Vulnerability Scoring System:...

Olive File Manager 1.0.1 Arbitrary File Upload / XSS

Title: ====== Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities Date: ===== 2013-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1009 VL-ID: ===== 1009 Common Vulnerability Scoring System: ==================================== 5.6 Introduction: =============...

Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities

Document Title: =============== Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1009 Release Date: ============= 2013-07-12 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2013-3532

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

Sql injection

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

CVE-2013-3532

CVE-2013-3532 describes an SQL injection in the Web Dorado Spider Video Player (SpiderVPlayer) WordPress plugin, version 2.1, exposed via the settings.php theme parameter. The root cause is unparameterized SQL handling, permitting remote attackers to execute arbitrary SQL commands. Impact per sou...

CVE-2013-3532

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

Wordpress Spider Video Player plugin SQL Injection

No description provided by source...

WordPress Plugin Spider Video Player - theme SQL Injection

WordPress Plugin Spider Video Player - theme SQL Injection source: https://www.securityfocus.com/bid/59021/info Spider Video Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...