37 matches found
CVE-2009-4170
CVE-2009-4170 affects the WP-Cumulus WordPress plugin (1.20 and possibly other versions). A remote attacker can trigger a crafted request to wp-cumulus.php (likely without parameters) to cause an error message that reveals the installation path, constituting information disclosure with partial co...
CVE-2009-4169
Cross-site scripting XSS vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4168
Cross-site scripting XSS vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site...
CVE-2009-4168: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site...
CVE-2009-4170: Exposure of Sensitive Information to an Unauthorized Actor
WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message...
CVE-2009-4169: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Vulnerabilities in WP-Cumulus for WordPress
Hello Bugtraq! I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
Vulnerabilities in WP-Cumulus for WordPress
No description provided by source. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS: http://site/wp-content/plugins/wp-cumulus/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3 ...
WordPress WP-Cumulus <= 1.20 Vulnerabilities
Exploit for unknown platform in category web applications =================================================== Vulnerabilities in WP-Cumulus = 1.20 for WordPress =================================================== I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress...
WordPress WP-Cumulus <= 1.20 - Vulnerabilities
There are several vulnerabilities in this WordPress WP-Cumulus: cross-site scripting and full path disclosure vulnerabilities. Solution Update the WordPress...
Vulnerabilities in WP-Cumulus <= 1.20 for WordPress
No description provided by source. I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://server/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure / Cross-Site Scripting
I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://server/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure Cross-Site Scripting
WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure Cross-Site Scripting I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure:...
WP-Cumulus 1.20 Cross Site Scripting
Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS: http://site/wp-content/plugins/wp-cumulus/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3Ca+href='javascript:alertdocument.cookie'+style='font-size:+40pt'%3EClick%20me%3C/a%3E%3C/tags%3E...
Vulnerabilities in WP-Cumulus for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине WP-Cumulus для WordPress. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
WordPress WP-Cumulus Plugin 1.x - Cross-Site Scripting Vulnerability
WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability. It is caused by the application fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker...
WordPress Plugin WP-Cumulus 1.x - tagcloud.swf Cross-Site Scripting
WordPress Plugin WP-Cumulus 1.x - tagcloud.swf Cross-Site Scripting source: https://www.securityfocus.com/bid/37100/info The WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...