WordPress Repagent Plugin <= 2.2.2 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in dewplayer-vinyl.swf xml and dewplayer-vinyl-en.swf xml parameters. Solution Update the plugin...

WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure

This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...

WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure

This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...

WordPress Advanced Dewplayer Plugin <= 1.2 - Full Path Disclosure

This plugin is prone to a direct request full path disclosure in dewplayer.php. Solution Update the plugin...

Vulnerabilities in Dewplayer

Hello 3APA3A! I want to inform you about vulnerabilities in Dewplayer. These are Content Spoofing and Cross-Site Scripting vulnerabilities. There are near 422 000 web sites with dewplayer.swf in Google's index. And it's just one file name and there are other file names of this player such as...

Vulnerabilities in plugins for WordPress, Joomla and Plone with Dewplayer

Hello 3APA3A! These are Content Spoofing and Cross-Site Scripting vulnerabilities in plugins for WordPress, Joomla and Plone with Dewplayer. Earlier I wrote about vulnerabilities in Dewplayer http://seclists.org/fulldisclosure/2013/Dec/192. This is media player, which is used at thousands web sit...

WordPress Advanced Dewplayer 'dew_file' Directory Traversal Vulnerability

WordPress Advanced Dewplayer Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Directory traversal

Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...

CVE-2013-7240

Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...

CVE-2013-7240

The CVE-2013-7240 entry affects the WordPress plugin Advanced Dewplayer (version 1.2). A directory traversal flaw exists in the plugin’s download-file.php that allows an attacker to read arbitrary files by manipulating the dew_file parameter (dot-dot traversal). Exploitation details are consisten...

Advanced Dewplayer Plugin for WordPress 'download-file.php'脚本目录遍历漏洞

Bugtraq ID:64587 CVE ID:CVE-2013-7240 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Advanced Dewplayer插件不正确限制对wp-content/plugins/advanced-dewplayer/admin-panel/download-file.php脚本的访问，允许攻击者利用漏洞通过目录遍历序列读取任意文件。 0 WordPress Advanced Dewplayer Plugin 1.x 目前没有详细解决方案提供：...

WordPress Plugin Advanced Dewplayer - download-file.php Script Directory Traversal

WordPress Plugin Advanced Dewplayer - download-file.php Script Directory Traversal source: https://www.securityfocus.com/bid/64587/info The Advanced Dewplayer plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input...

WordPress Advanced Dewplayer Plugin - Script Directory Traversal

Advanced Dewplayer plugin is prone to a directory traversal vulnerability because of failure of cleaning up user-supplied input. An attacker can obtain sensitive information that could aid in further attacks. Solution Upgrade the plugin...

WordPress Plugin Advanced Dewplayer - 'download-file.php' Script Directory Traversal

source: https://www.securityfocus.com/bid/64587/info The Advanced Dewplayer plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could ai...

Dewplayer 2.2.2 Cross Site Scripting

Hello list! I want to inform you about vulnerabilities in Dewplayer. These are Content Spoofing and Cross-Site Scripting vulnerabilities. There are near 422 000 web sites with dewplayer.swf in Google's index. And it's just one file name and there are other file names of this player such as...