9 matches found
EUVD-2013-2635
Malware in sbrugna...
CVE-2013-2696
Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2013-2696
Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2013-2696
CVE-2013-2696 affects the All in One Webmaster WordPress plugin prior to 8.2.4. A CSRF flaw lets remote attackers hijack authentication for requests that insert XSS sequences, potentially abusing an authenticated session. CVSS v2 base score 6.8 (Medium). Remediation: update the plugin to 8.2.4 or...
CVE-2013-2696
Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
PT-2013-3876
Name of the Vulnerable Software and Affected Versions All in One Webmaster plugin versions prior to 8.2.4 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS...
CVE-2013-2696: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
WordPress One Webmaster Plugin <= 8.2.3 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that insert cross site scripting sequences. Solution Update the plugin...