245 matches found
CVE-2015-1000009
CVE-2015-1000009 affects the WordPress plugin google-adsense-and-hotel-booking version 1.05, specifically the proxy.php script. The vulnerability results in an open proxy/post proxy capability, allowing an attacker to proxy POST requests through the host site, potentially aiding attack concealmen...
CVE-2015-1000009
Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...
Cross-site scripting vulnerability in Wordpress plugin adsense-click-fraud-monitoring
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. The Wordpress plugin adsense-click-fraud-monitoring has a cross-site scripting vulnerability due to the lack ...
1 Million Computers Hacked for making big Money from Adsense
A group of cyber criminals has infected as much as 1 Million computers around the world over the past two years with a piece of malware that hijacks search results pages using a local proxy. Security researchers from Romania-based security firm Bitdefender revealed the presence of this massive...
Google AdSense - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Google AdSense published at the 'play' market has multiple vulnerabilities...
WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability
WordPress Google Adsense plugin version 1.29 suffers from a cross site scripting vulnerability. WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability Plugin Name : Google Adsense Effected Version : 1.29 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XS...
WordPress Google Adsense 1.29 Cross Site Scripting
Plugin Name : Google Adsense Effected Version : 1.29 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...
WordPress Google Adsense and Hotel Booking Plugin <= 1.05 - Open Redirection
The vulnerability is in the ./plugin/google-adsense-and-hotel-booking/proxy.php. It allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks. Solution Update the plugin...
Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy
Plugin is still affected and has been closed. The code in ./plugin/google-adsense-and-hotel-booking/proxy.php allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks, or DoS a site if the POST request is pointed back at itself causing a loop...
Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy
Plugin is still affected and has been closed. The code in ./plugin/google-adsense-and-hotel-booking/proxy.php allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks, or DoS a site if the POST request is pointed back at itself causing a loop...
WordPress Plugin Video Gallery 2.7 - SQL Injection
Exploit Title: WordPress Video Gallery 2.7 SQL Injection Date: 20-01-2015 Software Link: https://wordpress.org/plugins/contus-video-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $GET'vid' is not...
WordPress All in One Adsense YPN Plugin <= 2.0.1 - Cross Site Scripting
This plugin is prone to an unspecified cross site scripting vulnerability in all-in-one-adsense-&-ypn.php. Solution Update the plugin...
WordPress All in One Adsense YPN Plugin <= 2.0.1 - Cross Site Scripting
This plugin is prone to an unspecified cross site scripting vulnerability in all-in-one-adsense-&-ypn.php. Solution Update the plugin...
WordPress All in One Adsense YPN Plugin <= 2.0.1 - Security Bypass
This plugin is prone to a direct request account manipulation in all-in-one-adsense-&-ypn.php. Solution Upgrade the plugin...
Adsense Click Fraud Monitoring <= 1.7.5 - XSS
XSS via the phpwhois https://github.com/phpWhois/phpWhois component, which is also affected by a RCE apparently https://github.com/phpWhois/phpWhois/issues/34. It is unclear whether or not the issue has been fixed in the plugin...
WordPress Ad-Manager 1.1.2 Open Redirect
CVE-2014-8754 WordPress “Ad-Manager Plugin” Dest Redirect Privilege Escalation Exploit Title: WordPress Ad-Manager Plugin Dest Redirect Privilege Escalation Vulnerability Product: WordPress Ad-Manager Plugin Vendor: CodeCanyon Vulnerable Versions: 1.1.2 Tested Version: 1.1.2 Advisory Publication:...
CVE-2014-9100
Cross-site scripting XSS vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the idcode parameter in the whydoworkadsense page to wp-admin/options-general.php...
CVE-2014-9099
Cross-site request forgery CSRF vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the whydoworkadsense page in wp-admin/options-general.php...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the whydoworkadsense page in wp-admin/options-general.php...
CVE-2014-9100
Cross-site scripting XSS vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the idcode parameter in the whydoworkadsense page to wp-admin/options-general.php...