Lucene search
+L

42 matches found

WPVulnDB
WPVulnDB
added 2015/02/22 12:0 a.m.25 views

Google Doc Embedder <= 2.5.18 - Cross-Site Scripting (XSS)

The Google Doc Embedder WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

4.3CVSS1.6AI score0.02073EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2015/02/21 12:0 a.m.5 views

WordPress Plugin Google Doc Embedder Cross-Site Scripting Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server to set up their own weblog. Google Doc Embedder plugin is available to PDF, MS Office and other file types embedded in the web page plug-ins. WordPress plugin Google Doc Embedder has a...

4.3CVSS6AI score0.02073EPSS
Exploits1References1
NVD
NVD
added 2015/02/19 3:59 p.m.22 views

CVE-2015-1879

Cross-site scripting XSS vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php...

4.3CVSS5.8AI score0.02073EPSS
Exploits1References3
Prion
Prion
added 2015/02/19 3:59 p.m.22 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php...

4.3CVSS6.2AI score0.02073EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2015/02/19 3:0 p.m.56 views

CVE-2015-1879

CVE-2015-1879 affects the WordPress plugin Google Doc Embedder. The vulnerability is a cross-site scripting (XSS) flaw in the plugin prior to version 2.5.19, exploitable via the profile parameter in an edit action on the gde-settings page (to wp-admin/options-general.php). Root cause: improper ha...

4.3CVSS5.9AI score0.02073EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2015/02/11 12:0 a.m.3 views

WordPress Plugin Google Doc Embedder 'options-general.php' HTML Injection Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. An HTML injection vulnerability in the WordPress plugin Google Doc Embedder 'options-general.php' allows attackers to run supplied HTML and script code or steal...

7.3AI score
Exploits0References1
Packet Storm
Packet Storm
added 2015/02/09 12:0 a.m.24 views

WordPress Google Doc Embedder 2.5.18 Cross Site Scripting

Title: WordPress 'Google Doc Embedder' plugin - XSS Version: 2.5.18 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/google-document-embedder/ Contacted WordPress: 2015/01/26 ==========================================================...

7.4AI score
Exploits0
WPVulnDB
WPVulnDB
added 2014/12/03 11:56 a.m.19 views

Google Document Embedder <= 2.5.16 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS7.3AI score0.05021EPSS
Exploits2References1Affected Software1
NVD
NVD
added 2014/12/02 4:59 p.m.13 views

CVE-2014-9173

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

7.5CVSS8.4AI score0.05021EPSS
Exploits2References5
Prion
Prion
added 2014/12/02 4:59 p.m.16 views

Sql injection

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

7.5CVSS9.2AI score0.05021EPSS
Exploits2References5Affected Software1
Cvelist
Cvelist
added 2014/12/02 4:0 p.m.21 views

CVE-2014-9173

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...

8.4AI score0.05021EPSS
Exploits2References5
CVE
CVE
added 2014/12/02 4:0 p.m.51 views

CVE-2014-9173

Affected software: WordPress Google Doc Embedder plugin. Vulnerability: SQL injection in view.php via the gpid parameter. Versions: affected up to 2.5.15 (e.g., before 2.5.15; 2.5.14 noted in sources). Impact: remote attackers could execute arbitrary SQL commands. Root cause: unsafeguarded gpid u...

7.5CVSS8.7AI score0.05021EPSS
Exploits2References5Affected Software1
WPVulnDB
WPVulnDB
added 2014/11/25 5:23 p.m.22 views

Google Document Embedder <= 2.5.14 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS7.3AI score0.05021EPSS
Exploits2References3Affected Software1
exploitpack
exploitpack
added 2014/11/25 12:0 a.m.11 views

WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection

WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection Exploit Title: Google Doc Embedder 2.5.14 SQL Injection Date: 10-11-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl http://twitter.com/KacperSzurek Software Link:...

0.1AI score
Exploits0
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.21 views

Google Document Embedder 2.4.6 - pdf.php file Parameter Arbitrary File Disclosure

The Google Doc Embedder WordPress plugin was affected by a pdf.php file Parameter Arbitrary File Disclosure security vulnerability...

5CVSS6.3AI score0.50017EPSS
Exploits4References4Affected Software1
NVD
NVD
added 2014/05/29 2:19 p.m.16 views

CVE-2012-4915

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...

5CVSS6.7AI score0.50017EPSS
Exploits4References4
Prion
Prion
added 2014/05/29 2:19 p.m.17 views

Directory traversal

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...

5CVSS7.2AI score0.50017EPSS
Exploits4References4Affected Software1
CVE
CVE
added 2014/05/29 2:0 p.m.59 views

CVE-2012-4915

CVE-2012-4915 affects the Google Doc Embedder Plugin for WordPress. A directory-traversal in libs/pdf.php allows remote reading of arbitrary files via .. in the file parameter. Affected plugin versions are older than 2.5.4. Mitigation is to upgrade to 2.5.4 or later (or apply vendor-provided fixe...

5CVSS6.8AI score0.50017EPSS
Exploits4References4Affected Software1
Cvelist
Cvelist
added 2014/05/29 2:0 p.m.32 views

CVE-2012-4915

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...

6.7AI score0.50017EPSS
Exploits4References4
Check Point Advisories
Check Point Advisories
added 2013/06/18 12:0 a.m.26 views

WordPress Plugin Google Document Embedder Arbitrary File Disclosure (CVE-2012-4915)

A remote code execution vulnerability has been reported in Google Doc Embedder Plugin for WordPress...

5CVSS7.3AI score0.50017EPSS
Exploits4
Rows per page
Query Builder