EUVD-2013-3653

Malware in sbrugna...

WordPress Feedweb Plugin <= 3.0.6 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress Feedweb Plugin <= 2.4 - DOM Cross Site Scripting

This plugin is prone to a DOM cross site scripting vulnerability. Solution Update the plugin...

WordPress Feedweb Plugin '_wp_http_referer'参数跨站脚本漏洞

Bugtraq ID:65800 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Feedweb插件wp-content/plugins/feedweb/feedwebsettings.php不正确过滤"wphttpreferer" POST参数请求，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress Feedweb Plugin 2.4 目前没有详细解决方案提供：...

CVE-2013-3720

Cross-site scripting XSS vulnerability in widgetremove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wppostid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in widgetremove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wppostid parameter...

CVE-2013-3720

The CVE-2013-3720 entry describes an XSS vulnerability in the WordPress Feedweb plugin prior to version 1.9, specifically in widget_remove.php. The flaw allows an authenticated WordPress administrator to inject arbitrary script/HTML via the wp_post_id parameter, enabling browser-side script execu...

CVE-2013-3720

Cross-site scripting XSS vulnerability in widgetremove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wppostid parameter...

WordPress Feedweb Plugin - Cross Site Scripting

WordPress Feedweb plugin's "wppostid'" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin Feedweb - &#039;wp_post_id&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/58771/info Feedweb plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...