WordPress Duplicate Post Plugin <= 2.5 - Reflected XSS

This plugin is prone to a reflected XSS in options-general.php post parameter. Solution Update the plugin...

CVE-2014-4848

Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...

CVE-2014-4848

The CVE-2014-4848 entry concerns the Blogstand Smart Banner WordPress plugin (version 1.0). A stored/reflected XSS vulnerability exists in the bs_blog_id parameter passed to wp-admin/options-general.php, enabling attackers to inject arbitrary script/HTML. Impact is web-page script execution by re...

CVE-2014-4845

Cross-site scripting XSS vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannermanbackground parameter to wp-admin/options-general.php...

PT-2014-6162

Name of the Vulnerable Software and Affected Versions Blogstand Banner plugin version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the bs blog id parameter to "wp-admin/options-general.php". Recommendations For Blogstand Banne...

PT-2014-6159

Name of the Vulnerable Software and Affected Versions BannerMan plugin version 0.2.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the bannerman background parameter to "wp-admin/options-general.php". Recommendations For BannerMan plug...

CVE-2014-4848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Blogstand Banner blogstand-smart-banner plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bsblogid parameter to wp-admin/options-general.php...

CVE-2014-4845: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the BannerMan plugin 0.2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bannermanbackground parameter to wp-admin/options-general.php...

CVE-2014-4723

Cross-site scripting XSS vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php...

PT-2014-6075

Name of the Vulnerable Software and Affected Versions Easy Banners plugin version 1.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name parameter to "wp-admin/options-general.php". This enables attackers to execute malicious...

CVE-2014-4723: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php...

CVE-2014-4717

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...

Qualiteam X-Cart 3.x general.php perl_binary Parameter Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/9560/info X-Cart has been reported to be prone to an issue that may allow remote attackers to execute arbitrary commands on the affected system. The issue is caused by a failure of the application to sanitize values...

Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

Polaring <= 0.04.03 (general.php) Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '64020' ssvid version = '1.0' author = '皮皮' vulDate = '2006-09-28' createDate = '2015-12-24...

Simple Share Buttons Adder 4.4 - options-general.php Multiple Admin Actions CSRF

The Simple Share Buttons Adder WordPress plugin was affected by an options-general.php Multiple Admin Actions CSRF security vulnerability...

PT-2014-5551

Name of the Vulnerable Software and Affected Versions Member Approval plugin 131109 for WordPress Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable...

CVE-2014-3850: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable registration approval via a request to...

PT-2014-2553

Name of the Vulnerable Software and Affected Versions Mail On Update plugin versions prior to 5.2.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the...

CVE-2013-2107: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailonupdatemailto parameter in the mail-on-update pag...