EUVD-2012-5272

Malware in sbrugna...

EUVD-2012-5271

Malware in sbrugna...

Pay With Tweet <= 1.1 - Multiple Vulnerabilities

The pay-with-tweet WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

wordpress pay with tweet plugin <= 1.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Date: 01/06/2012 Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Version: 1.1 1 Blind...

CVE-2012-5350

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...

CVE-2012-5349

Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...

Sql injection

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...

CVE-2012-5350

CVE-2012-5350 affects the WordPress Pay With Tweet plugin (before 1.2). The vulnerability is a SQL injection in the paywithtweet shortcode, exploitable by remote authenticated users with certain permissions via the id parameter. This can lead to arbitrary SQL execution with the permissions of the...

CVE-2012-5349

Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...

CVE-2012-5350

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...

CVE-2012-5349

The CVE refers to multiple stored/reflected XSS flaws in WordPress Pay With Tweet plugin’s pay.php, affects versions before 1.2. An attacker can inject arbitrary script/HTML via the link, title, or dl parameters, potentially impacting site integrity and user sessions. The issue is mitigated by up...

Wordpress plugin Pay With a Tweet <= 1.1 a plurality of defect and repair-vulnerability warning-the black bar safety net

Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Author: Gianluca Brindisi gATbrindi. si @gbrindisi http://brindi.si/g/ Download address: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Affect version: 1.1 1 Blind SQL Injection in shortcode: Short code parameter...

WordPress Pay With Tweet Cross Site Scripting / SQL Injection

Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...

WordPress Pay with Tweet Plugin <= 1.1 - Multiple Vulnerabilities

WordPress Pay with Tweet plugin is prone to a blind SQL injection and XSS vulnerabilities. Solution Update the plugin...

Wordpress Pay With Tweet Plugin <= 1.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...