WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via playlist.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

EUVD-2016-1079

Malware in sbrugna...

EUVD-2016-1078

Malware in sbrugna...

Wordpress hdw-tube plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress hdw-tube plugin version 1.2. An attacker can exploit...

Wordpress hdw-tube plugin cross-site scripting vulnerability (CNVD-2016-09347)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress hdw-tube plugin version 1.2. An attacker can exploit...

CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000134

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000134

Reflected XSS in wordpress plugin hdw-tube v1.2...

Cross site scripting

Reflected XSS in wordpress plugin hdw-tube v1.2...

Cross site scripting

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000134

WordPress HDW Video Gallery = 1.3, which contains the fix. No additional exploit details are provided in the supplied documents.

CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000135

The connected template confirms a Cross-Site Scripting (XSS) vulnerability in WordPress HDW Video Gallery plugin versions 1.2 and earlier, exploitable via mychannel.php (HDW Tube plugin). Successful exploitation allows arbitrary script execution in a user’s browser, potentially enabling session h...

CVE-2016-1000135: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000134: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin hdw-tube v1.2...

PT-2016-4526

Name of the Vulnerable Software and Affected Versions hdw-tube version 1.2 Description The issue is related to a Reflected XSS in the hdw-tube wordpress plugin. Recommendations For version 1.2, update to a newer version that contains a fix for this issue, if available. At the moment, there is no...

PT-2016-4527

Name of the Vulnerable Software and Affected Versions hdw-tube version 1.2 Description The issue is related to a Reflected XSS in the hdw-tube wordpress plugin. Recommendations For version 1.2, update to a newer version that contains a fix for this issue, if available. At the moment, there is no...

WordPress HDW Tube Plugin <= 1.2 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability via /hdw-tube/mychannel.php file. Solution Update the plugin...

HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hdw-tube WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/hdw-tube/playlist.php?playlist=""...