CVE-2023-25473

Cross-Site Request Forgery CSRF vulnerability in Miro Mannino Flickr Justified Gallery plugin = 3.5 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Miro Mannino Flickr Justified Gallery plugin = 3.5 versions...

CVE-2023-25473 WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Miro Mannino Flickr Justified Gallery plugin = 3.5 versions...

CVE-2023-25473

CVE-2023-25473 — WordPress Flickr Justified Gallery Plugin

PT-2023-20091 · Unknown · Miro Mannino Flickr Justified Gallery

Name of the Vulnerable Software and Affected Versions: Miro Mannino Flickr Justified Gallery plugin versions = 3.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

Malicious Package

Overview @miro-site/ui-core is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview @miro-site/core is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious Package

Overview @miro-site/test-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in @miro-site/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca77890c1dc9000f839accc01fdf6d95cbbbe1ee8d5bdf0caa651e3b2d8686d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @miro-site/localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ed9a83072029828451c3aa68fec9a49ec55530b597b59576b0a8c497776385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @miro-site/features-standard-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14befc1f8b80266548629b51f024e1ee42d70a03cc467d729375c93907af5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @miro-site/ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 183b4fea73bd0ece44c3d474c9357406101e8b174047197127d72219aee8ac3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-43 Malicious code in @miro-site/features-standard-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14befc1f8b80266548629b51f024e1ee42d70a03cc467d729375c93907af5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mambo 4.5.4 - SQL Injection

Mambo 4.5.4 - SQL Injection Mambo SQL Injection Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.4 Website: http://www.mamboserver.com/ BID: 20366 OSVDB: 50002 Description: Mambo is a popular Open Source Content Management System released under the GNU General Public license GNU...

Mambo 4.5.3h - Multiple Vulnerabilities

Mambo 4.5.3h - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.3h Website: http://www.mamboserver.com BID: 16775 CVE: CVE-2006-0871 CVE-2006-1794 OSVDB: 23402 23503 23505 SECUNIA: 18935 PACKETSTORM: 44191 Description: Mambo ...

Mambo < 4.5.3h - Multiple Vulnerabilities

Mambo Multiple Vulnerabilities Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.3h Website: http://www.mamboserver.com BID: 16775 CVE: CVE-2006-0871 CVE-2006-1794 OSVDB: 23402 23503 23505 SECUNIA: 18935 PACKETSTORM: 44191 Description: Mambo is a popular Open Source Content...

Fedora 12 : Miro-2.5.4-3.fc12 / firefox-3.5.9-1.fc12 / galeon-2.0.7-22.fc12 / etc (2010-5506)

Update to new upstream Firefox version 3.5.9 / XULRunner version 1.9.1.9, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.9 Update also includes all packages depending on gecko-libs rebuilt agains...

Fedora 11 : Miro-2.5.4-3.fc11 / blam-1.8.5-19.fc11 / chmsee-1.0.1-16.fc11 / epiphany-2.26.3-9.fc11 / etc (2010-5515)

Update to new upstream Firefox version 3.5.9 / XULRunner version 1.9.1.9, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.9 Update also includes all packages depending on gecko-libs rebuilt agains...

Fedora 11 : Miro-2.5.4-2.fc11 / blam-1.8.5-18.fc11 / chmsee-1.0.1-15.fc11 / eclipse-3.4.2-20.fc11 / etc (2010-1936)

Update to new upstream Firefox version 3.5.8, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.8 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 13 : Miro-2.5.4-3.fc13 / firefox-3.6.2-1.fc13 / galeon-2.0.7-25.fc13 / etc (2010-5202)

Update to new upstream Firefox version 3.6.2, fixing a security issue detailed in the upstream advisory: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.2 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner...