EUVD-2007-2749

Malware in sbrugna...

Redoable 1.2 Theme header.php s Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/24037/info Redoable is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2007-2757

Multiple cross-site scripting XSS vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 wp-content/themes/redoable/searchloop.php or 2 wp-content/themes/redoable/header.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 wp-content/themes/redoable/searchloop.php or 2 wp-content/themes/redoable/header.php...

CVE-2007-2757

Technical details about CVE-2007-2757 are not publicly provided in the connected documents. The initial description lists XSS in Redoable 1.2 with two s parameter vectors, but no further specifics or patches are present here.

RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included)

note to editors: this patch resolves this vulnerability: http://redlevel.org/wp-content/uploads/patch.zip !-- Redoable 1.2 - Cross-Site Scripting Vulnerability --------------- Vulnerable Code --------------- header.php line 6: ... elseif issearch ? Search for ?php echo $s ... searchloop.php line...

WordPress Theme Redoable 1.2 - header.php?s Cross-Site Scripting

WordPress Theme Redoable 1.2 - header.php?s Cross-Site Scripting source: https://www.securityfocus.com/bid/24037/info Redoable is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WordPress Theme Redoable 1.2 - 'header.php?s' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24037/info Redoable is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...