PT-2012-2170

Name of the Vulnerable Software and Affected Versions Whois Search plugin version 1.4.2.3 Description The issue is a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the domain parameter to "index.php" when the WHOIS widget is enabled...

WordPress Whois Search Plugin <= 1.4.2.2 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "domain" parameter. Solution Update the plugin...

CVE-2011-5194: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193...

PT-2012-2171

Name of the Vulnerable Software and Affected Versions Whois Search plugin versions prior to 1.4.2.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the domain parameter in the vendors/samswhois/samswhois.inc.php file. This enables...

CVE-2011-5193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than...

looter (поиск новых векторов атаки)

Небольшой скрипт,реализующий некоторые техники в сборе инфы и поиске новых векторов атаки: 1 non recurse tld request loot 2 soa email/domain loot 3 whois email/domain loot вводная Иногда бывают ситуации,когда требуется найти новые 'точки входа'. looter может помочь облегчить задачу - например,мож...

targets-asn NSE Script

Produces a list of IP prefixes for a given routing AS number ASN. This script uses a whois server database operated by the Shadowserver Foundation. We thank them for granting us permission to use this in Nmap. Output is in CIDR notation. Script Arguments targets-asn.whoisport The whois port to us...

WordPress WHOIS Plugin 1.4.2.3 - Cross Site Scripting

WordPress WHOIS plugin's "domain" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

WordPress Plugin WHOIS 1.4.2 3 - 'domain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Unfixed XSS vulnerability at weblicity.nl

Security researcher Atmon3r, has submitted on 31/12/2011 a cross-site-scripting XSS vulnerability affecting weblicity.nl, which at the time of submission ranked 1553172 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently...

WordPress Whois Search Cross Site Scripting

| Exploit Title: Wordpress whois search Cross-Site Scripting Vulnerability Google Dork: "inurl:wp-content/plugins/wp-whois/" Date: 31/12/2011 Author:||Atmon3r || Discovered By: Atmon3r Software Link: http://wordpress.org/extend/plugins/wordpress-whois-search/ Version: All Version Security Risk::...

Whois Cart Billing - Multiple Web Vulnerabilities

Document Title: =============== Whois Cart Billing - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=343 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 343 Produ...

Whois Cart Billing - Multiple Web Vulnerabilities

Document Title: =============== Whois Cart Billing - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=343 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 343 Produ...

FTC Criticizes ICANN Plan to Expand Domain Names

The Federal Trade Commission FTC is taking aim at a plan by the Internet Corporation for Assigned Names and Numbers ICANN to increase the number of domains on the Web. On Dec. 16, the FTC sent a letter to ICANN claiming that expanding the number of generic top-level domains gTLDs would open users...

Nmap NSE net: whois

Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. In using this script your IP address will be sent to iana.org. Additionally your address and the address of the target of the...

Nmap NSE net: whois

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: WHOIS

This script queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. This is a wrapper on the Nmap Security Scanner's http://nmap.org whois.nse. OpenVAS Vulnerability Test $Id:...

Nmap NSE: WHOIS

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOFT64 PHP Whois Cross Site Scripting

/\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- +SOFT64 PHP Whois XSS Vulnerability // Author Info x Author: bi0 x Contact: bukibvathotmaildotcom x Thanks: sp1r1t,packetdeath,redking and all...