9 matches found
EUVD-2012-2558
Malware in sbrugna...
Wordpress Plugin ThreeWP Email Reflector 1.13 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download: http://wordpress.org/extend/plugins/threewp-email-reflector/installation/ Timeline: 29 May 2012:...
CVE-2012-2572
Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...
Cross site scripting
Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...
CVE-2012-2572
The CVE-2012-2572 entry affects the ThreeWP Email Reflector plugin for WordPress (versions before 1.16). The vulnerability is a Cross-Site Scripting (XSS) flaw in the Subject field of emails, due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML....
CVE-2012-2572
Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...
WordPress ThreeWP Email Reflector Plugin - Stored XSS
ThreeWP Email Reflector plugin is prone to a stored XSS vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication...
WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting
WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download:...
WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download: http://wordpress.org/extend/plugins/threewp-email-reflector/installation/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 Ma...