85 matches found
Cross-Site Scripting (XSS)
jPlayer is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victims browser via the jQuery and id parameters in the Flash SWF component. This CVE is different from CVE-2013-1942 and CVE-2013-2023...
Cross-Site Scripting (XSS)
jPlayer is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the jQuery and id parameters in the Flash SWF component. This CVE is different from CVE-2013-2022 and CVE-2013-2023...
CherryMusic Cross-Site Scripting Vulnerability
CherryMusic is a music streaming server based on CherryPy and jPlayer. A cross-site scripting vulnerability exists in CherryMusic, which can be exploited by an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of an affected site, due to the program...
Wordpress MP3-jPlayer Plugin Information Disclosure Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. MP3-jPlayer is one of the multimedia playback plug-ins. An information disclosure vulnerability exists in Wordpress MP3-jPlayer plugin version v2.3.2, which can be exploited by an attacker ...
CVE-2015-1000008
Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2...
Path traversal
Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2...
CVE-2015-1000008
The CVE-2015-1000008 entry concerns the WordPress MP3-jPlayer plugin (v2.3.2) and a path disclosure flaw. Connected records (CNVD/NVD/W PVulnDB) confirm an information disclosure vulnerability in this plugin, with PoC content showing download.php leaking server paths. The WpVulnDB entry notes “Fu...
WordPress MP3-jPlayer 2.3.2 Path Disclosure Vulnerability
WordPress MP3-jPlayer plugin version 2.3.2 suffers from a path disclosure vulnerability. Title: Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/mp3-jplayer/ Vendor:...
WordPress MP3 jPlayer Plugin <= 2.3.3 - Full Path Disclosure
Because of this vulnerability, attackers can disclose path information on wordpress sites. Solution Update the plugin...
WordPress MP3 jPlayer Plugin <= 2.3.3 - Full Path Disclosure
Because of this vulnerability, attackers can disclose path information on wordpress sites. Solution Update the plugin...
WordPress MP3-jPlayer 2.3.2 Path Disclosure
Title: Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/mp3-jplayer/ Vendor: https://profiles.wordpress.org/simonward-1/ Vendor Notified: 2015-08-06 Vendor Contact: Description:...
MP3-jPlayer <= 2.4.2 - Full Path Disclosure
The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...
MP3-jPlayer <= 2.4.2 - Full Path Disclosure
The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...
WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure
Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...
WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure
Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...
WordPress MP3-Jplayer 2.1 Local File Disclosure
Dx . Made In Algeria . xZ Title : WordPress plugin mp3-jplayer v2.3 Local File Disclosure Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Disclosure 3 3 Greetings t0 Palestine 3 3 ! Vendor :...
WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure
Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...
WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure
Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...