EUVD-2017-1565

Malware in sbrugna...

WordPress furikake plugin 0.1.0 - Unauthenticated Open Redirect vulnerability

Unauthenticated Open Redirect vulnerability found by Carl Clegg in WordPress furikake plugin version 0.1.0. Vulnerable via furikake-redirect parameter allows redirecting to an attacker controlled page. Solution We are waiting for information from the vendor...

Wordpress Furikake plugin open to redirection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Furikake is used in one of the statistics plugin. An open redirect vulnerability exists in version 0.1.0 of the Wordpress...

CVE-2017-1000434

Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...

CVE-2017-1000434

Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...

Open redirect

Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...

CVE-2017-1000434

Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header'location:'.urldecode$GET'furikake-redirect';...

CVE-2017-1000434

WordPress Furikake plugin version 0.1.0 is vulnerable to an Open Redirect. The issue occurs via the furikake-redirect parameter, where the code uses header('location:'.urldecode($_GET['furikake-redirect'])) without validation, redirecting users to an attacker-controlled URL. Impact is unauthentic...

furikake - Unauthenticated Open Redirect

The furikake WordPress plugin was affected by an Unauthenticated Open Redirect security vulnerability...