32 matches found
I'm how to find Google on the server LFI vulnerability-vulnerability warning-the black bar safety net
This article describes how to use the local file inclusion vulnerability to read the the Google a server on any file. Vulnerability exists in Google's Feedburner, in the submission of the vulnerability, Google's security team quickly fixed the vulnerability. FeedBurner is what Wikipedia on the...
Google FeedBurner FeedSmith 2.2 Cross-Site Request Forgery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25921/info FeedBurner FeedSmith is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to use a victim's currently active session to perform actions with the application...
Feedburner Hosting Malicious JavaScript Dropper
A sub-domain of Google’s Feedburner RSS management platform is hosting a string of malicious JavaScript embedded with an iFrame, all of which is designed to upload a Trojan onto user machines and redirect visitors to a series of malicious sites. According to a report published by the security fir...
Vulnerabilities in FeedBurner FeedSmith for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и HTTP Response Splitting + Cross-Site Scripting уязвимостях в плагине FeedBurner FeedSmith для WordPress. Который разрабатывается FeedBurner, принадлежащей компании Google. Full path disclosure:...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. FeedBurner FeedSmith: crossite scripting, information leak. myPHPNuke: crossite scripting, SQL injection...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attackers to change settings and hijack blog feeds via a request to wp-admin/options-general.php that submits parameter values to FeedBurnerFeedSmithPlugin.php, as demonstrated by the ...
CVE-2007-5229
Cross-site request forgery CSRF vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attackers to change settings and hijack blog feeds via a request to wp-admin/options-general.php that submits parameter values to FeedBurnerFeedSmithPlugin.php, as demonstrated by the ...
CVE-2007-5229
Cross-site request forgery CSRF vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attackers to change settings and hijack blog feeds via a request to wp-admin/options-general.php that submits parameter values to FeedBurnerFeedSmithPlugin.php, as demonstrated by the ...
CVE-2007-5229
The CVE-2007-5229 entry describes a CSRF vulnerability in the WordPress plugin FeedBurner FeedSmith 2.2 . The vulnerability allows remote attackers to modify plugin settings and hijack blog feeds by submitting malicious requests to wp-admin/options-general.php, which send parameters to FeedBurner...
WordPress FeedBurner Plugin <= 2.2 - CSRF
Because of this vulnerability, the attackers can change settings and hijack blog feeds via a request to wp-admin/options-general.php. Solution Update the plugin...
WordPress Plugin Google FeedBurner FeedSmith 2.2 - Cross-Site Request Forgery
WordPress Plugin Google FeedBurner FeedSmith 2.2 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/25921/info FeedBurner FeedSmith is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to use a victim's currently active...
WordPress Plugin Google FeedBurner FeedSmith 2.2 - Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/25921/info FeedBurner FeedSmith is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to use a victim's currently active session to perform actions with the application. This issue affects FeedBurner...