4 matches found
Server side request forgery (ssrf)
Server-side request forgery SSRF vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter...
CVE-2014-9292
Server-side request forgery SSRF vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter...
WordPress jRSS Widget Plugin <= 1.2 - SSRF
This vulnerability is in the proxy.php. It allows the attackers to trigger outbound requests and enumerate open ports via the "URL" parameter. Solution Update the plugin...
PT-2014-8924
Name of the Vulnerable Software and Affected Versions jRSS Widget plugin version 1.2 and earlier for WordPress Description A server-side request forgery SSRF issue allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter. Recommendations For jRSS Widget...