WordPress Google Analyticator Plugin < 6.4.9.4 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112037";...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

CVE-2015-4697

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

CVE-2015-4697

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

CVE-2015-4697

The CVE-2015-4697 entry maps to a CSRF vulnerability in the WordPress Google Analyticator plugin. Affected product: Google Analyticator WordPress plugin (prior to version 6.4.9.3 revision @1183563 per CVE record; openvas entry also notes vulnerability in versions

PT-2017-6792

Name of the Vulnerable Software and Affected Versions Google Analyticator Wordpress Plugin versions prior to 6.4.9.3 rev @1183563 Description The issue is related to a cross-site request forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

CVE-2015-4697: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

WordPress Google Analyticator plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Google Analyticator is one of the Google Analytics plug-ins. A cross-site scripting vulnerability exists in WordPre...

CVE-2015-6238

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...

CVE-2015-6238

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...

CVE-2015-6238

The CVE-2015-6238 entry concerns the Google Analyticator WordPress plugin. Vulnerable versions are prior to 6.4.9.6, where multiple XSS vectors exist through parameters on the google-analyticator page (ga_adsense, ga_admin_disable_DimentionIndex, ga_downloads_prefix, ga_downloads, ga_outbound_pre...

PT-2015-7129

Name of the Vulnerable Software and Affected Versions Google Analyticator plugin versions prior to 6.4.9.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in the google-analyticator page to wp-admin/admin.php. The vulnerable parameter...

CVE-2015-6238: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...

Google Analyticator Multiple XSS Vulnerabilities

Proof of Concept URLs for XSS in Google Analyticator 6.4.9.4: Url http://example.com/wordpress/wp-admin/admin.php?page=google-analyticator Parameter Name gaadsense Parameter Type POST Attack Pattern x'" onmouseover=alert9 Url http://example.com/wordpress/wp-admin/admin.php?page=google-analyticato...

WordPress Google Analyticator <= 6.4.9.5 - Multiple XSS

These vulnerabilities allow an attacker to inject arbitrary web script or HTML via the 1. gadownloadsprefix 2. gadownloads 3. gaadsense 4. gaadmindisableDimentionIndex 5. gaoutboundprefix parameter in the google-analyticator page to wp-admin/admin.php. Solution Update the plugin...

WordPress Google Analyticator 'options-general.php' plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Google Analyticator is one of the Google Analytics plug-ins. A cross-site request forgery vulnerability exists in t...

WordPress Google Analyticator 6.4.9.3 CSRF

Title: Cross-Site Request Forgery in Google Analyticator Wordpress Plugin v6.4.9.3 before rev @1183563 Submitter: Nitin Venkatesh Product: Google Analyticator Wordpress Plugin Product URL: https://wordpress.org/plugins/google-analyticator/ Vulnerability Type: Cross-Site Request Forgery CWE-352...

Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery (CSRF)

The Google Analyticator WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Google Analyticator Plugin XSS

Exploit for php platform in category web applications ======================================== WordPress Google Analyticator Plugin XSS ======================================== Exploit Title: Google Analyticator wordpress plugin xss Date: 2010-03-27 Author: Bloox Home : http://darkns.com Bug Type...