1945 matches found
CVE-2018-5290
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...
CVE-2018-5293
The CVE-2018-5293 entry concerns the WordPress GD Rating System plugin, version 2.3. It describes a Cross-Site Scripting (XSS) vulnerability exposed via the wp-admin/admin.php parameter on the gd-rating-system-tools page. This is a client-facing issue in the WordPress plugin code path that handle...
CVE-2018-5290
The CVE-2018-5290 entry concerns WordPress GD Rating System plugin version 2.3, which suffers a directory traversal vulnerability in the gd-rating-system-transfer path via wp-admin/admin.php. This allows reading arbitrary files on the server (CNVD/OpenVAS details; CVSSv3 base 7.5, high). Patch st...
CVE-2018-5289
The CVE-2018-5289 entry concerns WordPress GD Rating System plugin version 2.3, which exposes a Directory Traversal vulnerability in the wp-admin/admin.php parameter for the gd-rating-system-information page. The CNVD/OpenVAS records corroborate a traversal flaw that can enable reading arbitrary ...
CVE-2018-5286
The WordPress GD Rating System plugin version 2.3 is affected by an XSS vulnerability in the gd-rating-system-about page, exploitable via the wp-admin/admin.php parameter. The CVE notes a cross-site scripting issue with I=P and Gained impact mainly on integrity, with no explicit exploit details p...
CVE-2018-5292
The CVE-2018-5292 entry applies to WordPress GD Rating System plugin version 2.3, where an XSS vulnerability exists in the gd-rating-system-information page. The flaw is triggered by XSS via the wp-admin/admin.php panel parameter, enabling arbitrary script injection. Affected product: GD Rating S...
CVE-2018-5291
CVE-2018-5291 affects WordPress GD Rating System plugin v2.3. The vulnerability is a directory traversal flaw in the wp-admin/admin.php panel on the gd-rating-system-tools page, allowing potential reads of arbitrary files (as indicated by CNVD/NVD entries). NVD lists CVSS v3 base score 7.5 (HIGH)...
CVE-2018-5287
CVE-2018-5287 affects the WordPress GD Rating System plugin, version 2.3. A directory traversal flaw exists in the wp-admin/admin.php parameter for the gd-rating-system-about page, enabling an attacker to read arbitrary files on the server. Public CVSS metrics show base scores of 5.0 (NVD CVSS2) ...
CVE-2018-5286
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page...
CVE-2018-5288
CVE-2018-5288 affects the WordPress GD Rating System plugin (version 2.3) for WordPress. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the gd-rating-system-transfer page, specifically through a wp-admin/admin.php panel parameter. The connected sources confirm the affected plu...
CVE-2018-5288
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...
WordPress GD Rating System Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.GD Rating System plugin is used in one of the rating plugin. A cross-site scripting vulnerability exists in version...
GD Rating System 2.3 - Multiple Vulnerabilities
The GD Rating System WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
Oracle Linux 7 : php (ELSA-2017-3221)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3221 advisory. - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx CVE-2016-10167 Tenable has extracted the preceding description block directly from the Oracle...
gd: Integer overflow in gd_io.c
An integer overflow flaw, leading to a heap-based buffer overflow was found in the way libgd read some specially-crafted gd2 files. A remote attacker could use this flaw to crash an application compiled with libgd or in certain cases execute arbitrary code with the privileges of the user running...
RHEL 7 : php (RHSA-2017:3221)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3221 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: A null pointer dereference flaw was...
php security update
5.4.16-43 - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx CVE-2016-10167 - gd: Signed Integer Overflow gdio.c CVE-2016-10168...
[SECURITY] Fedora 27 Update: php-horde-Horde-Image-2.5.2-1.fc27
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
[SECURITY] Fedora 27 Update: gd-2.2.5-1.fc27
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...