28 matches found
EUVD-2015-1016
Malware in sbrugna...
EUVD-2022-39087
Malicious code in bioql PyPI...
WordPress plugin MP3 jPlayer cross-site request forgery vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin MP3 jPlayer version 2.7.3 and prior versions are vulnerable to cross-site request...
CVE-2022-36373
Multiple Cross-Site Request Forgery CSRF vulnerabilities in Simon Ward MP3 jPlayer plugin = 2.7.3 at WordPress...
CVE-2022-36373 WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery CSRF vulnerabilities in Simon Ward MP3 jPlayer plugin = 2.7.3 at WordPress...
CVE-2022-36373
CVE-2022-36373 concerns the WordPress MP3 jPlayer plugin (versions <= 2.7.3). The NVD entry reports multiple CSRF vulnerabilities with a base CVSS v3.1 score of 8.8 (HIGH) and an attack vector of NETWORK, requiring user interaction and no privileges. Connected sources consistently describe CSR...
WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by Rasi Afeef Patchstack Alliance in the WordPress MP3-jPlayer plugin versions = 2.7.3. Solution Deactivate and delete. No reply from the vendor...
PT-2022-23334
Name of the Vulnerable Software and Affected Versions: Simon Ward MP3 jPlayer plugin versions = 2.7.3 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web...
MP3 jPlayer <= 2.7.3 - Multiple CSRF
The plugin does not have CSRF check in some places, which could allow attackers to make logged in users perform unwanted actions...
WordPress plugin MP3 jPlayer 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin MP3 jPlayer version 2.7.3 and prior versions are vulnerable to cross-site request...
Wordpress MP3-jPlayer Plugin Information Disclosure Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. MP3-jPlayer is one of the multimedia playback plug-ins. An information disclosure vulnerability exists in Wordpress MP3-jPlayer plugin version v2.3.2, which can be exploited by an attacker ...
CVE-2015-1000008
Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2...
Path traversal
Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2...
CVE-2015-1000008
The CVE-2015-1000008 entry concerns the WordPress MP3-jPlayer plugin (v2.3.2) and a path disclosure flaw. Connected records (CNVD/NVD/W PVulnDB) confirm an information disclosure vulnerability in this plugin, with PoC content showing download.php leaking server paths. The WpVulnDB entry notes “Fu...
WordPress MP3-jPlayer 2.3.2 Path Disclosure Vulnerability
WordPress MP3-jPlayer plugin version 2.3.2 suffers from a path disclosure vulnerability. Title: Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/mp3-jplayer/ Vendor:...
WordPress MP3 jPlayer Plugin <= 2.3.3 - Full Path Disclosure
Because of this vulnerability, attackers can disclose path information on wordpress sites. Solution Update the plugin...
MP3-jPlayer <= 2.4.2 - Full Path Disclosure
The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...
MP3-jPlayer <= 2.4.2 - Full Path Disclosure
The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...
WordPress MP3-jPlayer 2.3.2 Path Disclosure
Title: Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/mp3-jplayer/ Vendor: https://profiles.wordpress.org/simonward-1/ Vendor Notified: 2015-08-06 Vendor Contact: Description:...
WordPress MP3 jPlayer Plugin <= 2.3.3 - Full Path Disclosure
Because of this vulnerability, attackers can disclose path information on wordpress sites. Solution Update the plugin...