18 matches found
EUVD-2015-0928
Malware in sbrugna...
EUVD-2015-1521
Malware in sbrugna...
WordPress Plugin Banner Effect Header 'banner_effect_divide' Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Banner Effect Header 'bannereffectdivide' as it fails to...
CVE-2015-1384
Cross-site scripting XSS vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannereffectdivid parameter in the BannerEffectOptions page to wp-admin/options-general.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannereffectdivid parameter in the BannerEffectOptions page to wp-admin/options-general.php...
CVE-2015-1384
Cross-site scripting XSS vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannereffectdivid parameter in the BannerEffectOptions page to wp-admin/options-general.php...
PT-2015-5257
Name of the Vulnerable Software and Affected Versions Banner Effect Header plugin versions prior to 1.2.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the banner effect divid parameter in the BannerEffectOptions page to...
CVE-2015-1384: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannereffectdivid parameter in the BannerEffectOptions page to wp-admin/options-general.php...
Banner Effect Header Security Advisory - XSS Vulnerability - CVE-2015-1384
Information ------------ Advisory by Netsparker. Name: XSS Vulnerability in Banner Effect Header Affected Software : Banner Effect Header Affected Versions: 1.2.7 and possibly below Vendor Homepage : https://wordpress.org/plugins/banner-effect-header/ Vulnerability Type : Cross-site Scripting...
Banner Effect Header 1.2.6 - XSS & CSRF
The Banner Effect Header WordPress plugin was affected by a XSS & CSRF security vulnerability...
CVE-2015-0920
Cross-site request forgery CSRF vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the bannereffectemail parameter in the BannerEffectOptions pag...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the bannereffectemail parameter in the BannerEffectOptions pag...
CVE-2015-0920
Cross-site request forgery CSRF vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the bannereffectemail parameter in the BannerEffectOptions pag...
CVE-2015-0920
CVE-2015-0920 affects the Banner Effect Header WordPress plugin (version 1.2.6). A CSRF vulnerability allows remote attackers to hijack administrator authentication to trigger XSS via the banner_effect_email parameter on the BannerEffectOptions page (wp-admin/options-general.php). The issue is ex...
WordPress plugin Banner Effect Header 'options-general.php' cross-site scripting vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Banner Effect Header 'options-general.php' as it fails to...
CVE-2015-0920: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the bannereffectemail parameter in the BannerEffectOptions pag...
PT-2015-4970
Name of the Vulnerable Software and Affected Versions Banner Effect Header plugin version 1.2.6 Description A cross-site request forgery CSRF issue allows remote attackers to hijack administrator authentication for requests that conduct cross-site scripting XSS attacks. This is achieved via the...
WordPress Banner Effect Header 1.2.6 XSS / CSRF
|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Banner Effect Header 1.2.6 Plugin XSS, CSRF Vulnerability | | Date : Date: 2015-01-02 | | Exploit Author: Ashiyane Digital Security Team | |...