EUVD-2014-2864

Malware in sbrugna...

EUVD-2014-2863

Malware in sbrugna...

WordPress GD Star Rating Plugin <= 1.9.18 - Security Bypass

Because of this vulnerability, attackers can bypass certain security restrictions. Solution Update the plugin...

WordPress GD Star Rating Plugin <= 1.9.16 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress GD Star Rating Plugin <= 1.9.7 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Plugin GD Star Rating SQL Injection Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.GD Star Rating plugin is a rating and voting plugin. WordPress plugin GD Star Rating SQL injection vulnerability. Due ...

CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

Sql injection

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

CVE-2014-2839

The CVE-2014-2839 entry concerns the WordPress GD Star Rating plugin, affected version 19.22. The vulnerability is a SQL injection in the s parameter of the gd-star-rating-stats page (wp-admin/admin.php), allowing a remote administrator to execute arbitrary SQL commands. This is rooted in insuffi...

CVE-2014-2838

CVE-2014-2838 affects the WordPress plugin GD Star Rating (v19.22). The vulnerability set includes CSRF that can hijack administrator authentication, enabling requests that conduct (1) SQL injection via the s parameter on the gd-star-rating-stats page to wp-admin/admin.php and (2) cross-site scri...

CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

WordPress Another Classifieds Plugin - SQL Injection

This WordPress GD Star Rating plugin's "keywordphrase" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database when doing a search for classifieds. Solution...

WordPress Another Classifieds Plugin - SQL Injection

This WordPress GD Star Rating plugin's "keywordphrase" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database when doing a search for classifieds. Solution...

GD Star Rating <= 1.9.16 - Cross-Site Scripting (XSS)

The gd-star-rating WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

GD Star Rating 1.9.7 - Cross-Site Scripting (XSS)

The gd-star-rating WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

GD Star Rating 1.9.22 - Cross-Site Request Forgery (CSRF)

The gd-star-rating WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress GD Star Rating plugin <= 1.9.10 SQL Injection

No description provided by source. Exploit Title: WordPress GD Star Rating plugin = 1.9.10 SQL Injection Vulnerability Date: 2011-09-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/gd-star-rating.zip Version: 1.9.10 tested Not...

WordPress GD Star Rating Plugin <= 19.22 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that conduct SQL injection attacks or cross-site scripting XSS attacks. Solution Update the plugin...