Lucene search
K

6150 matches found

Exploit DB
Exploit DB
added 2011/11/03 12:0 a.m.29 views

Jara 1.6 - Multiple Vulnerabilities

!/Mohammed/bin/YahYa Jara v1.6 Multiple Vulnerabilities -------------------------------------------+ download : http://sourceforge.net/projects/jara/files/v1.6/jarav16.zip AutHOr : Or4nG.M4n cOntAct : priv8teathotmail.com versiOn : v1.6 Tested : My Mind :...

7AI score
Exploits0
Patchstack
Patchstack
added 2011/04/26 12:0 a.m.7 views

WordPress Ajax Recent Posts Plugin 1.0.1 - Cross-Site Scripting

WordPress Ajax Recent Posts plugin's "do" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

2.9AI score
Exploits0References1Affected Software1
exploitpack
exploitpack
added 2011/04/26 12:0 a.m.17 views

WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting

WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting source: https://www.securityfocus.com/bid/47579/info The WP Ajax Recent Posts WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

0.4AI score
Exploits0
htbridge
htbridge
added 2011/04/12 12:0 a.m.28 views

Cross-site Scripting (XSS) Vulnerability in WP-Ajax-Recent-Posts

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP-Ajax-Recent-Posts which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP-Ajax-Recent-Posts The vulnerability exists due to input sanitation error in the "number"...

4.3CVSS6AI score
Exploits0Affected Software1
NVD
NVD
added 2011/03/28 4:55 p.m.13 views

CVE-2011-0760

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...

4.3CVSS6.7AI score0.00089EPSS
Exploits0References5
Prion
Prion
added 2011/03/28 4:55 p.m.13 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...

4.3CVSS7AI score0.00089EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2011/03/28 4:0 p.m.42 views

CVE-2011-0760

CVE-2011-0760 affects the WP Related Posts WordPress plugin (version 1.0). The vulnerability is a cross-site request forgery (CSRF) in the plugin’s configuration screen, enabling remote attackers to hijack administrator sessions and inject cross-site scripting (XSS) via the parameters wp_relatedp...

4.3CVSS6.8AI score0.00089EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2011/03/28 4:0 p.m.17 views

CVE-2011-0760

Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...

6.7AI score0.00089EPSS
Exploits0References5
WPVulnDB
WPVulnDB
added 2011/03/17 12:0 a.m.15 views

WP Related Posts <= 1.0 - Multiple CSRF

The WP Related Posts WordPress plugin was affected by a Multiple CSRF security vulnerability...

4.3CVSS2AI score0.00089EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2011/03/14 7:55 p.m.22 views

Code injection

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

4CVSS6.3AI score0.01555EPSS
Exploits0References13Affected Software1
OSV
OSV
added 2011/03/14 7:55 p.m.7 views

CVE-2011-0701

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

5.8AI score
Exploits0References18
UbuntuCve
UbuntuCve
added 2011/03/14 7:55 p.m.24 views

CVE-2011-0701

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

4CVSS5.9AI score0.01555EPSS
Exploits0References1
OSV
OSV
added 2011/03/14 7:55 p.m.4 views

DEBIAN-CVE-2011-0701

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

4CVSS6.2AI score0.01555EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2011/03/14 7:0 p.m.27 views

CVE-2011-0701

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

4CVSS4.4AI score0.01555EPSS
Exploits0
Packet Storm
Packet Storm
added 2011/02/26 12:0 a.m.22 views

WordPress IGIT Posts Slider Widget 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress IGIT Posts Slider Widget 1.0 Vulnerability...........Reflected Cross-site Scripting Download................http://www.hackingethics.com/blog/wordpress-plugins/igit-posts-slider-widget/...

Exploits0
Patchstack
Patchstack
added 2011/02/23 12:0 a.m.15 views

WordPress IGIT Posts Slider Widget Plugin 1.0 - Cross-Site Scripting

IGIT Posts Slider Widget plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

2.3AI score
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2011/02/23 12:0 a.m.17 views

WordPress Plugin IGIT Posts Slider Widget 1.0 - &#039;src&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2011/02/23 12:0 a.m.10 views

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker m...

6.7AI score
Exploits0
The Hacker News
The Hacker News
added 2011/02/18 5:56 a.m.7 views

Social networks to be monitored by Mumbai police to keep a check on hate pages !

After observing an increase in the number of phishing attacks and several other cyber crimes, the cyber police have intensified patrolling of the social networking sites. Police, with the help of IT experts, will keep a check on any hate posts or groups created in cyberspace. The action reportedl...

6.6AI score
Exploits0
Patchstack
Patchstack
added 2011/02/03 12:0 a.m.17 views

WordPress Related Posts Plugin <= 1.0 - Multiple CSRF and XSS

Because of these cross site request forgery vulnerabilities in the configuration screen in wp-relatedposts.php, the attackers can hijack the authentication of administrators for requests that insert cross-site scripting sequences. Solution Update the plugin...

4.3CVSS2.6AI score0.00089EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder