Lucene search
+L

655 matches found

CNVD
CNVD
•added 2016/12/14 12:00 a.m.•9 views

WordPress Plugin Google Analytics Counter Tracker PHP Object Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WordPress plugin Google Analytics Counter Tracker has a PHP object injection vulnerability, the vulnerability...

7.6AI score
SaveExploits0References1
zdt
zdt
•added 2016/12/14 12:00 a.m.•49 views

WordPress Google Analytics Counter Tracker 3.1.5 PHP Object Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Google Analytics Counter Tracker WordPress Plugin unauthenticed PHP Object injection vulnerability -----------------------------------------------------------------------...

0.2AI score
SaveExploits0
Mageia
Mageia
•added 2016/12/11 10:44 p.m.•34 views

Updated python-tornado package fixes security vulnerability

A difference in cookie parsing between Tornado and web browsers especially when combined with Google Analytics could allow an attacker to set arbitrary cookies and bypass XSRF protection. The cookie parser has been rewritten to fix this attack...

5.8AI score
SaveExploits0References2
Patchstack
Patchstack
•added 2016/12/11 12:00 a.m.•13 views

WordPress Google Analytics Counter Tracker Plugin <= 3.4.0 - PHP Object Injection

This plugin is prone to a PHP object injection vulnerability. It allows attackers to execute arbitrary PHP code. Solution Update the plugin...

6.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2016/12/11 12:00 a.m.•15 views

WordPress Google Analytics Counter Tracker Plugin <= 3.4.0 - PHP Object Injection

This plugin is prone to a PHP object injection vulnerability. It allows attackers to execute arbitrary PHP code. Solution Update the plugin...

6.1AI score
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
•added 2016/12/11 12:00 a.m.•79 views

WordPress Google Analytics Counter Tracker 3.1.5 PHP Object Injection

------------------------------------------------------------------------ Google Analytics Counter Tracker WordPress Plugin unauthenticed PHP Object injection vulnerability ------------------------------------------------------------------------ Remco Vermeulen, July 2016...

0.7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2016/12/07 12:00 a.m.•16 views

Fedora Update for drupal7-google_analytics FEDORA-2016-9c04d7e5c5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2016/11/15 12:00 a.m.•11 views

Google Analytics Counter Tracker <= 3.4.0 - Unauthenticated PHP Object Injection

The Google Analytics Counter Tracker WordPress plugin was affected by an Unauthenticated PHP Object Injection security vulnerability...

3.1AI score
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2016/11/15 12:00 a.m.•13 views

Fedora 25 : drupal7-google_analytics (2016-9c04d7e5c5)

7.x-2.3 - Google Analytics - Moderately Critical - Cross Site Scripting - SA-CONTRIB-2016-042 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

5.4AI score
SaveExploits0References2
ArchLinux
ArchLinux
•added 2016/10/21 12:00 a.m.•62 views

[ASA-201610-13] python-django: cross-site request forgery

Arch Linux Security Advisory ASA-201610-13 ========================================== Severity: Medium Date : 2016-10-21 CVE-ID : CVE-2016-7401 Package : python-django Type : cross-site request forgery Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package...

7.5CVSS2.2AI score0.05702EPSS
SaveExploits1References3
ArchLinux
ArchLinux
•added 2016/10/21 12:00 a.m.•72 views

[ASA-201610-12] python2-django: cross-site request forgery

Arch Linux Security Advisory ASA-201610-12 ========================================== Severity: Medium Date : 2016-10-21 CVE-ID : CVE-2016-7401 Package : python2-django Type : cross-site request forgery Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package...

7.5CVSS2.2AI score0.05702EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2016/10/10 6:10 a.m.•35 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

7.5CVSS6.7AI score0.05702EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2016/10/10 6:10 a.m.•16 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.05702EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2016/10/10 6:10 a.m.•18 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.05702EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2016/10/10 6:10 a.m.•50 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

7.5CVSS6.7AI score0.05702EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2016/10/10 5:56 a.m.•11 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.05702EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2016/10/10 5:56 a.m.•95 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS6.7AI score0.05702EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2016/10/10 5:56 a.m.•49 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS6.7AI score0.05702EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2016/10/10 5:56 a.m.•13 views

python-django: CSRF protection bypass on a site with Google Analytics

A CSRF flaw was found in Django, where an interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. In this update, the parser for ''request.COOKIES'' has been simplified to better match browser behavi...

7.5CVSS7.1AI score0.05702EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2016/10/10 5:56 a.m.•48 views

Moderate: Red Hat Security Advisory: python-django security update

An update for python-django is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.7AI score0.05702EPSS
SaveExploits1References2
Rows per page
Query Builder