245 matches found
CVE-2014-9099
CVE-2014-9099 describes a CSRF vulnerability in the WordPress plugin WhyDoWork AdSense (version 1.2). The issue allows an attacker to hijack an administrator’s authenticated session via requests to the whydowork_adsense page in wp-admin/options-general.php, enabling unauthorized actions as the ad...
CVE-2014-9100
The CVE-2014-9100 entry concerns the WordPress plugin WhyDoWork AdSense v1.2, which is vulnerable to Cross-site Scripting (XSS) via the idcode parameter on the whydowork_adsense page that redirects to wp-admin/options-general.php. The root cause is unvalidated/reflected input in the idcode parame...
WordPress WhyDoWork AdSense Plugin <= 1.2 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "idcode" parameter. Solution Update the plugin...
WordPress WhyDoWork AdSense Plugin <= 1.2 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of administrators for requests. Solution Update the plugin...
AskApache Firefox Adsense 3.0 - Unspecified CSRF
The askapache-firefox-adsense WordPress plugin was affected by an Unspecified CSRF security vulnerability...
All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation
The all-in-one-adsense-and-ypn WordPress plugin was affected by an all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation security vulnerability...
WordPress WhyDoWork AdSense 1.2 XSS / CSRF
Exploit Title: WhyDoWork AdSense Plugin 1.2 - XSS and CSRF Date: 28 de Julio del 2014 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: https://wordpress.org/plugins/whydowork-adsense/ Tested on: Win7 & Linux Mint Affected Version : 2.0.2 & Anteriores. Contacts:...
WordPress WhyDoWork AdSense Plugin - Multiple Vulnerabilities
WhyDoWork AdSense plugin is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. These vulnerabilities allow an attacker to execute arbitrary script code in the browser, also, steal cookie-based authentication credentials. Solution Update the plugin...
WordPress Plugin WhyDoWork AdSense - 'options-general.php' Cross-Site Request Forgery (Option Manipulation)
source: https://www.securityfocus.com/bid/68954/info WhyDoWork AdSense plugin for WordPress is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker may exploit these issues to execute arbitrary script code in the browser of an unsuspecting user...
WordPress Plugin WhyDoWork AdSense - options-general.php Cross-Site Request Forgery (Option Manipulation)
WordPress Plugin WhyDoWork AdSense - options-general.php Cross-Site Request Forgery Option Manipulation source: https://www.securityfocus.com/bid/68954/info WhyDoWork AdSense plugin for WordPress is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An...
vBulletin Adsense Component 'viewpage.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Warning: Malicious version of FTP Software FileZilla stealing users' Credentials
Malware code can be very small, and the impact can be very severe! The Antivirus firm AVAST spotted a malicious version of the open source FTP File Transfer Protocol software 'FileZilla' out in the wild. The software is open source, but has been modified by the hackers that steal users'...
Сross-Site Request Forgery (CSRF) in AskApache Firefox Adsense Wordpress plugin
Advisory ID: HTB23188 Product: AskApache Firefox Adsense Wordpress plugin Vendor: AskApache Vulnerable Versions: 3.0 and probably prior Tested Version: 3.0 Advisory Publication: December 5, 2013 without technical details Vendor Notification: December 5, 2013 Public Disclosure: December 26, 2013...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the aafireadco...
CVE-2013-6992
Cross-site request forgery CSRF vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the aafireadco...
CVE-2013-6992
The CVE-2013-6992 entry concerns the AskApache Firefox Adsense WordPress plugin (versions ≤ 3.0). The vulnerability is a CSRF in /wp-admin/options-general.php caused by insufficient validation of the HTTP request origin, allowing a remote attacker to induce an administrator’s browser to submit re...
AskApache 3.0 Cross Site Request Forgery Vulnerability
AskApache Firefox Adsense WordPress plugin version 3.0 suffers from a cross site request forgery vulnerability. Product: AskApache Firefox Adsense Wordpress plugin Vendor: AskApache Vulnerable Versions: 3.0 and probably prior Tested Version: 3.0 Advisory Publication: December 5, 2013 without...
WordPress Firefox Adsense Plugin <= 3.0 - CSRF and XSS
Because of this vulnerability in askapache-firefox-adsense.php, the attackers can hijack the authentication of administrators for requests that conduct cross-site scripting attacks. Solution Update the plugin...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...
CVE-2013-2702
Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...