EUVD-2014-9212

Malware in sbrugna...

WordPress plugin gSlideShow has multiple cross-site request forgery vulnerabilities

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL. gSlideShow plugin is a plugin for photo album management. The WordPress plugin gSlideShow suffers from multiple...

CVE-2014-9391

Multiple cross-site request forgery CSRF vulnerabilities in the gSlideShow plugin 0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 rss, 2 displaytime or 3 transistiontime...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the gSlideShow plugin 0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 rss, 2 displaytime or 3 transistiontime...

CVE-2014-9391

CVE-2014-9391 affects the WordPress gSlideShow plugin (version 0.1 and earlier). The vulnerability is a multi-parameter CSRF (and associated XSS in documentation) in gslideshow.php that allows remote attackers to hijack administrator authentication for requests to wp-admin/options-general.php via...

CVE-2014-9391

Multiple cross-site request forgery CSRF vulnerabilities in the gSlideShow plugin 0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 rss, 2 displaytime or 3 transistiontime...

WordPress gSlideShow 0.1 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in gSlideShow Wordpress Plugin Author: Manideep K CVE-ID: CVE 2014-9391 Plugin Homepage: https://wordpress.org/plugins/gslideshow/ Version Affected: 0.1 probably lower versions Severity: High Description: Vulnerable Parameter: 1 id:rssid , name:rss 2...

Gslideshow <= 0.1 - Multiple CSRF

Plugin is still affected and has been closed...

WordPress gSlideshow Plugin 0.1 - CSRF and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution This plugin is closed...