42 matches found
Google Doc Embedder <= 2.5.18 - Cross-Site Scripting (XSS)
The Google Doc Embedder WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Plugin Google Doc Embedder Cross-Site Scripting Vulnerability
WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server to set up their own weblog. Google Doc Embedder plugin is available to PDF, MS Office and other file types embedded in the web page plug-ins. WordPress plugin Google Doc Embedder has a...
CVE-2015-1879
Cross-site scripting XSS vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php...
CVE-2015-1879
CVE-2015-1879 affects the WordPress plugin Google Doc Embedder. The vulnerability is a cross-site scripting (XSS) flaw in the plugin prior to version 2.5.19, exploitable via the profile parameter in an edit action on the gde-settings page (to wp-admin/options-general.php). Root cause: improper ha...
WordPress Plugin Google Doc Embedder 'options-general.php' HTML Injection Vulnerability
WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. An HTML injection vulnerability in the WordPress plugin Google Doc Embedder 'options-general.php' allows attackers to run supplied HTML and script code or steal...
WordPress Google Doc Embedder 2.5.18 Cross Site Scripting
Title: WordPress 'Google Doc Embedder' plugin - XSS Version: 2.5.18 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/google-document-embedder/ Contacted WordPress: 2015/01/26 ==========================================================...
Google Document Embedder <= 2.5.16 - SQL Injection
The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...
CVE-2014-9173
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...
Sql injection
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...
CVE-2014-9173
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter...
CVE-2014-9173
Affected software: WordPress Google Doc Embedder plugin. Vulnerability: SQL injection in view.php via the gpid parameter. Versions: affected up to 2.5.15 (e.g., before 2.5.15; 2.5.14 noted in sources). Impact: remote attackers could execute arbitrary SQL commands. Root cause: unsafeguarded gpid u...
Google Document Embedder <= 2.5.14 - SQL Injection
The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...
WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection
WordPress Plugin Google Document Embedder 2.5.14 - SQL Injection Exploit Title: Google Doc Embedder 2.5.14 SQL Injection Date: 10-11-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl http://twitter.com/KacperSzurek Software Link:...
Google Document Embedder 2.4.6 - pdf.php file Parameter Arbitrary File Disclosure
The Google Doc Embedder WordPress plugin was affected by a pdf.php file Parameter Arbitrary File Disclosure security vulnerability...
CVE-2012-4915
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...
Directory traversal
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...
CVE-2012-4915
CVE-2012-4915 affects the Google Doc Embedder Plugin for WordPress. A directory-traversal in libs/pdf.php allows remote reading of arbitrary files via .. in the file parameter. Affected plugin versions are older than 2.5.4. Mitigation is to upgrade to 2.5.4 or later (or apply vendor-provided fixe...
CVE-2012-4915
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...
WordPress Plugin Google Document Embedder Arbitrary File Disclosure (CVE-2012-4915)
A remote code execution vulnerability has been reported in Google Doc Embedder Plugin for WordPress...