33 matches found
WordPress post highlights plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . post highlights plugin is one of the text effects plugin . A cross-site scripting vulnerability exists in...
CVE-2014-8087
Cross-site scripting XSS vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/phsave.php...
CVE-2014-8087
CVE-2014-8087 corresponds to a stored XSS in the WordPress Post Highlights plugin (versions before 2.6.1). The vulnerability allows an attacker to inject arbitrary script/HTML via the txt parameter used in a headline action to ajax/ph_save.php. Public records consistently cite the affected compon...
CVE-2014-8087
Cross-site scripting XSS vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/phsave.php...
sandiego.gov XSS vulnerability
Vulnerable URL: https://www.sandiego.gov/sites/default/files/legacy/coo/2016highlights/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg==&cfwaftk=042437002UjFXxFQ2VsadXjZGy4EHwOwvPBs Details: Description| Value ---|--- Patched:| No Latest...
Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net
! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...
Highlights of Newly Released PCI DSS 3.0 Information
The standards are coming! The PCI SSC has finally let loose with some much needed information regarding the upcoming releases of the PCI DSS 3.0 and PA DSS 3.0 standards. Available on the PCI SSC website; the document titled "Version 3.0 Change Highlights" contains information on what PCI...
WordPress Post Highlights 2.2 SQL Injection
Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...
WordPress Plugin post highlights 2.2 - SQL Injection
WordPress Plugin post highlights 2.2 - SQL Injection Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...
WordPress Plugin post highlights 2.2 - SQL Injection
Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...
WordPress post highlights plugin <= 2.2 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'"; 0day.today 2018-02-27...
HITB Quartal Magazine - eZine Issue 006
Document Title: =============== HITB Quartal Magazine - eZine Issue 006 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/204.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-006.pdf Release Date: ============= 2011-06-16 Vulnerability...
