1625 matches found
CVE-2011-5180
Cross-site scripting XSS vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information. NOTE: this has been disputed by a...
CVE-2011-5180: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information. NOTE: this has been disputed by a...
PT-2012-2157
Name of the Vulnerable Software and Affected Versions ZooEffect plugin version 1.01 for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the page parameter in the wp-1pluginjquery.php file. Recommendations For ZooEffect plug...
CVE-2012-2109
SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activitywidgetfilter action...
CVE-2012-2109: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activitywidgetfilter action...
CVE-2011-4926
Cross-site scripting XSS vulnerability in adminimize/adminimizepage.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2011-4926: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in adminimize/adminimizepage.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...
PT-2012-2002
Name of the Vulnerable Software and Affected Versions Adminimize plugin versions prior to 1.7.22 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is exploited via the page parameter...
CVE-2011-5128: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 inc-options/deinstalloptions.php, 2 inc-options/themeoptions.php, or 3 inc-options/imexportoptions.php, ...
PT-2012-2106
Name of the Vulnerable Software and Affected Versions Adminimize plugin versions prior to 1.7.22 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the page parameter to API endpoints such as "/inc-options/deinstall options.php",...
CVE-2012-3434: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 datemin, or 3 datemax parameter...
CVE-2012-4246: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter; or the 2 footer, 3 status, or 4 testtarget parameter in the send page...
Cross site scripting
Cross-site scripting XSS vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging...
PT-2012-3056
Name of the Vulnerable Software and Affected Versions WP-RecentComments plugin versions prior to 2.0.7 Description The issue is related to a cross-site scripting XSS vulnerability in the rc ajax function, which allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2012-1068: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging...
DEBIAN-CVE-2011-5025
Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...
CVE-2010-5020
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2010-5020: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
PT-2011-1955
Name of the Vulnerable Software and Affected Versions NetArt Media iBoutique version 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the page parameter in the index.php file. Recommendations For NetArt Media iBoutique version 4.0...