WordPress WhyDoWork AdSense Plugin <= 1.2 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "idcode" parameter. Solution Update the plugin...

AskApache Firefox Adsense 3.0 - Unspecified CSRF

The askapache-firefox-adsense WordPress plugin was affected by an Unspecified CSRF security vulnerability...

All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation

The all-in-one-adsense-and-ypn WordPress plugin was affected by an all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation security vulnerability...

WordPress WhyDoWork AdSense 1.2 XSS / CSRF

Exploit Title: WhyDoWork AdSense Plugin 1.2 - XSS and CSRF Date: 28 de Julio del 2014 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: https://wordpress.org/plugins/whydowork-adsense/ Tested on: Win7 & Linux Mint Affected Version : 2.0.2 & Anteriores. Contacts:...

WordPress Plugin WhyDoWork AdSense - options-general.php Cross-Site Request Forgery (Option Manipulation)

WordPress Plugin WhyDoWork AdSense - options-general.php Cross-Site Request Forgery Option Manipulation source: https://www.securityfocus.com/bid/68954/info WhyDoWork AdSense plugin for WordPress is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An...

WordPress Plugin WhyDoWork AdSense - &#039;options-general.php&#039; Cross-Site Request Forgery (Option Manipulation)

source: https://www.securityfocus.com/bid/68954/info WhyDoWork AdSense plugin for WordPress is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker may exploit these issues to execute arbitrary script code in the browser of an unsuspecting user...

WordPress WhyDoWork AdSense Plugin - Multiple Vulnerabilities

WhyDoWork AdSense plugin is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. These vulnerabilities allow an attacker to execute arbitrary script code in the browser, also, steal cookie-based authentication credentials. Solution Update the plugin...

vBulletin Adsense Component 'viewpage.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Warning: Malicious version of FTP Software FileZilla stealing users' Credentials

Malware code can be very small, and the impact can be very severe! The Antivirus firm AVAST spotted a malicious version of the open source FTP File Transfer Protocol software 'FileZilla' out in the wild. The software is open source, but has been modified by the hackers that steal users'...

Сross-Site Request Forgery &#40;CSRF&#41; in AskApache Firefox Adsense Wordpress plugin

Advisory ID: HTB23188 Product: AskApache Firefox Adsense Wordpress plugin Vendor: AskApache Vulnerable Versions: 3.0 and probably prior Tested Version: 3.0 Advisory Publication: December 5, 2013 without technical details Vendor Notification: December 5, 2013 Public Disclosure: December 26, 2013...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the aafireadco...

CVE-2013-6992

Cross-site request forgery CSRF vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the aafireadco...

CVE-2013-6992

The CVE-2013-6992 entry concerns the AskApache Firefox Adsense WordPress plugin (versions ≤ 3.0). The vulnerability is a CSRF in /wp-admin/options-general.php caused by insufficient validation of the HTTP request origin, allowing a remote attacker to induce an administrator’s browser to submit re...

AskApache 3.0 Cross Site Request Forgery Vulnerability

AskApache Firefox Adsense WordPress plugin version 3.0 suffers from a cross site request forgery vulnerability. Product: AskApache Firefox Adsense Wordpress plugin Vendor: AskApache Vulnerable Versions: 3.0 and probably prior Tested Version: 3.0 Advisory Publication: December 5, 2013 without...

WordPress Firefox Adsense Plugin <= 3.0 - CSRF and XSS

Because of this vulnerability in askapache-firefox-adsense.php, the attackers can hijack the authentication of administrators for requests that conduct cross-site scripting attacks. Solution Update the plugin...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

CVE-2013-2702

CVE-2013-2702 affects the WordPress plugin Easy AdSense Lite (before 6.10). The vulnerability is a cross-site request forgery (CSRF) in the plugin’s settings that allows remote attackers to hijack authentication and perform privileged actions on behalf of arbitrary users. Exploitation details are...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

Free Monthly Websites 2.0 - Admin Password Change

========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...