WordPress Pretty Link 1.4.56 Cross Site Scripting

No description provided by source. Vulnerability ID: HTB23049 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinprettylinkwordpressplugin.html Product: Pretty Link WordPress Plugin Vendor: Caseproof http://blairwilliams.com/ Vulnerable Version: 1.4.56 and probably prior Tested...

WordPress Plugin Pretty Link 1.4.56 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50096/info The Pretty Link plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...

Cross-site Scripting Vulnerabilities in Pretty Link WordPress Plugin

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pretty Link WordPress Plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Pretty Link WordPress Plugin 1.1 Input passed via the "mindate" GET...

WordPress Pretty Link Like 1.4.56 SQL Injection

Exploit Title: 'Pretty Link Like' WordPress Plugin 1.4.56 Multiple SQL Injection Google Dork: N/A Author: MaKyOtOx special Pwet to ansx & Zizounette for bitcoin Date: 27/06/2011 Software Link: http://wordpress.org/extend/plugins/pretty-link/ Version: 1.4.56 not tested on previous versions Tested...

WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/48469/info The 'Pretty Link Lite' plugin for WordPress is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

WordPress Pretty Link Lite Plugin 1.4.56 - Multiple SQL Injection Vulnerabilities

This WordPress Pretty Link Lite plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections

WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48469/info The 'Pretty Link Lite' plugin for WordPress is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an...

PYSEC-2008-11

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

Debian Security Advisory DSA 612-1 (a2ps)

The remote host is missing an update to a2ps announced via advisory DSA 612-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4828

Cross-site scripting XSS vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DEBIAN-CVE-2007-4828

Cross-site scripting XSS vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-4828

CVE-2007-4828 is an XSS vulnerability in the API pretty-printing mode of MediaWiki. Affected are MediaWiki 1.8.0–1.8.4, 1.9.0–1.9.3, 1.10.0–1.10.1, and 1.11 development versions prior to 1.11.0. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors. There is no...

mediawiki -- cross site scripting vulnerability

The MediaWiki development team reports: A possible HTML/XSS injection vector in the API pretty-printing mode has been found and fixed. The vulnerability may be worked around in an unfixed version by simply disabling the API interface if it is not in use, by adding this to LocalSettings.php:...

CVE-2006-2637

The CVE-2006-2637 entry describes a cross-site scripting (XSS) vulnerability in view.php of TuttoPhp variants Morris Guestbook 1, Pretty Guestbook 1, and Smile Guestbook 1. An attacker can inject arbitrary script/HTML by providing a javascript: URI in the SRC attribute of an IMG element via the p...

PT-2002-2789 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: PGP versions 6.x through 7.x Description: The issue allows attackers to recover sensitive information that was supposed to be deleted by not clearing Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

PT-2002-1809 · Pgp +1 · Pgp +1

Name of the Vulnerable Software and Affected Versions: PGP version 7.0.3 Description: The issue arises from an interaction between PGP and the Windows Encrypted File System EFS when the "wipe deleted files" option is used. This interaction creates cleartext temporary files that cannot be wiped or...