WordPress Plugin RokBox Plugin - wp-contentpluginswp_rokboxjwplayerjwplayer.swf?abouttext Cross-Site Scripting

WordPress Plugin RokBox Plugin - wp-contentpluginswprokboxjwplayerjwplayer.swf?abouttext Cross-Site Scripting source: https://www.securityfocus.com/bid/56953/info The TimThumb plug-in for WordPress is prone to multiple security vulnerabilities, including: 1. A cross-site scripting vulnerability 2...

WordPress Rokbox 2.13 XSS / DoS / File Upload / Path Disclosure

Hello list! I want to warn you about multiple security vulnerabilities in plugin Rokbox for WordPress. These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses...

WordPress RokBox Plugin - XSS Vulnerabilities

WordPress RokBox plugin's /wp-content/plugins/wprokbox/jwplayer/jwplayer.swf abouttext parameter is prone to a cross-site scripting vulnerability. Solution Update the plugin...

WordPress Plugin RokBox Plugin - '/wp-content/plugins/wp_rokbox/jwplayer/jwplayer.swf?abouttext' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56953/info The TimThumb plug-in for WordPress is prone to multiple security vulnerabilities, including: 1. A cross-site scripting vulnerability 2. Multiple security-bypass vulnerabilities 3. An arbitrary file-upload vulnerability 4. An...

WordPress RokBox Multiple Vulnerabilities

These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses TimThumb 1.16 and JW Player 4.4.198, so some of vulnerabilities are related to plugin itself, some to...

JW Player / SVFP / Poodll / RokBox Cross Site Scripting

Hello list! Earlier I've wrote about Content Spoofing and Cross-Site Scripting vulnerabilities in JW Player http://securityvulns.com/docs28176.html. And I've mentioned that there are near million of web sites with vulnerable flash-file - it's only indexed by Google, and in reality there are much...