4120 matches found
Path traversal
Absolute path traversal vulnerability in Cross-RSS wp-cross-rss plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php...
CVE-2014-4938
SQL injection vulnerability in the WP Rss Poster wp-rss-poster plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in the wrp-add-new page to wp-admin/admin.php...
CVE-2014-4938
The CVE-2014-4938 entry concerns the WordPress WP RSS Poster plugin version 1.0.0. A SQL injection flaw exists in the wrp-add-new page (wp-admin/admin.php) exploitable via the id parameter, enabling remote attackers to execute arbitrary SQL commands. Documented impact includes typical web app con...
CVE-2014-4941
Absolute path traversal vulnerability in Cross-RSS wp-cross-rss plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php...
CVE-2014-4941
Cross-RSS for WordPress (plugin 1.7) is affected by an Absolute Path Traversal via the rss parameter to proxy.php, enabling reading arbitrary server files. Root cause: local file inclusion in the plugin’s handling of the rss input. Impact: potential exposure of sensitive files on the server. Reme...
PT-2014-6217
Name of the Vulnerable Software and Affected Versions WP Rss Poster wp-rss-poster plugin version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "wrp-add-new" page to "wp-admin/admin.php". Recommendations For WP R...
PT-2014-6220
Name of the Vulnerable Software and Affected Versions wp-cross-rss plugin version 1.7 Description The issue allows remote attackers to read arbitrary files by providing a full pathname in the rss parameter to the "proxy.php" endpoint. Recommendations For wp-cross-rss plugin version 1.7, consider...
CVE-2014-4938: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the WP Rss Poster wp-rss-poster plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in the wrp-add-new page to wp-admin/admin.php...
CVE-2014-4941: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in Cross-RSS wp-cross-rss plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php...
SOL15405 - OpenSSL 0.9.8l vulnerability CVE-2009-4355
Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...
SOL15401 - OpenSSL vulnerability CVE-2012-2333
Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...
CVE-2014-4687
Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...
Ninja RSS Syndicator 1.0.8 - Local File Include
No description provided by source. Joomla component Ninja RSS Syndicator 1.0.8 Local File Include Version : 1.0.8 Author : jdc Download : http://ninjaforge.com/index.php?option=comninjacentral&page=showpackage&id=74&Itemid=236...
Fizzle 0.5 RSS Feed HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23144/info Fizzle is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...
Webmaster-Tips.net Joomla! RSS Feed Reader 1.0 Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25999/info Webmaster-Tips.net Joomla! RSS Feed Reader is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromis...
pie web m{a,e}sher mod rss 0.1 - Remote File Inclusion Vulnerability
No description provided by source. Pie Web RSS module 0.1 lib Remote File injulide : download: http://pie.ekkaia.org/file/modrss-0.1.tar.gz ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRD...
Simplog <= 0.9.2 (s) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Simplog = 0.9.2 \s\ remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: intext:\Powered by simplog\r\n\r\n; if $argc5 echo Usage: php .$argv0. host...
RSS-aggregator 1.0 admin/fonctions/ Direct Request Administrator Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...
Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + Jinzora = 2.7 includepath Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- +...
Joomla QuickFAQ Component (com_quickfaq) Blind SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------- Joomla Component comquickfaq BSQL-i Vulnerability ----------------------------------------------------------------------------------------- +Title Joomla Component...