WordPress e-search <=1.0 - Cross-Site Scripting

Wordpress plugin e-search 1.0 and before contains a cross-site scripting vulnerability via dateselect.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

WordPress e-search <=1.0 - Cross-Site Scripting Detection

Wordpress plugin e-search 1.0 and before contains a cross-site scripting vulnerability via dateselect.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

PT-2026-60551

Name of the Vulnerable Software and Affected Versions cyrus-imapd versions prior to 3.12.3 Description An authenticated IMAP user can utilize the ESEARCH command to enumerate folder names under any specified account. This creates a content oracle, where the search returns UIDs of messages that...

CVE-2026-47083

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user content oracle. By using the ESEARCH command, an authenticated IMAP user could enumerate folder names under any account they could name. Search would return UIDs of messages matching the search,...

EUVD-2016-1074

Malware in sbrugna...

EUVD-2016-1075

Malware in sbrugna...

EUVD-2005-4508

Malware in sbrugna...

Wordpress e-search plugin cross-site scripting vulnerability (CNVD-2016-09338)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. e-search is one of the search plug-ins. A cross-site scripting vulnerability exists in version 1.0 of the Wordpress...

Wordpress e-search plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. e-search is one of the search plug-ins. A cross-site scripting vulnerability exists in version 1.0 of the Wordpress...

CVE-2016-1000131

Reflected XSS in wordpress plugin e-search v1.0...

CVE-2016-1000130

Reflected XSS in wordpress plugin e-search v1.0...

Cross site scripting

Reflected XSS in wordpress plugin e-search v1.0...

CVE-2016-1000131

The CVE refers to WordPress e-search plugin (version 1.0 and earlier) with a reflected cross-site scripting (XSS) vulnerability. The nuclei template specifies exploitation via the title_az.php endpoint, allowing an attacker to execute arbitrary scripts in a user’s browser and potentially steal co...

CVE-2016-1000130

CVE-2016-1000130 is a WordPress plugin issue in e-search

CVE-2016-1000131

Reflected XSS in wordpress plugin e-search v1.0...

CVE-2016-1000130

Reflected XSS in wordpress plugin e-search v1.0...

PT-2016-4522

Name of the Vulnerable Software and Affected Versions e-search version 1.0 Description The issue is related to a Reflected XSS in the e-search wordpress plugin. Recommendations For version 1.0, update to a newer version that contains a fix for this issue, if available. At the moment, there is no...

CVE-2016-1000131: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin e-search v1.0...

CVE-2016-1000130: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin e-search v1.0...

PT-2016-4523

Name of the Vulnerable Software and Affected Versions e-search version 1.0 Description The issue is related to a Reflected XSS in the e-search wordpress plugin. Recommendations For version 1.0, update to a newer version that contains a fix for this issue, if available. At the moment, there is no...