Wordpress GigPress 2.1.10 Plugin Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: GigPress 2.1.10 wordpress plugin Stored XSS Date: 21-2-2011 Author: Saif El-Sherei Version: GigPress 2.1.10, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8 Vendor Response: plugin Author released an update to fix this issue Inf...

IWantOneButton 3.0.1 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpressplugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10...

WordPress Plugin ComicPress Manager 1.4.9 - 'lang' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46590/info The ComicPress Manager plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin YT-Audio 1.7 - v Cross-Site Scripting

WordPress Plugin YT-Audio 1.7 - v Cross-Site Scripting source: https://www.securityfocus.com/bid/46591/info The YT-Audio plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Drupal Module Cumulus 5.x-1.16.x-1.4 - tagcloud Cross-Site Scripting

Drupal Module Cumulus 5.x-1.16.x-1.4 - tagcloud Cross-Site Scripting source: https://www.securityfocus.com/bid/46594/info The Cumulus module for Drupal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue t...

WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Title: WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability Vendor: Thingamahoochie Software Product web page: http://www.winmerge.org Affected version: 2.12.4.0 Unicode Summary: WinMerge is an Open Source differenci...

WordPress Plugin YT-Audio 1.7 - 'v' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46591/info The YT-Audio plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

HTB22841: SQL Injection in Comment Rating wordpress plugin

Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...

WordPress Plugin GD Star Rating 1.9.7 - 'wpfn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46480/info The GD Star Rating plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Vanilla Forums 2.0.17.x - 'p' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46486/info Vanilla Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

IBM Lotus Sametime Server 8.0 - 'stcenter.nsf' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46481/info IBM Lotus Sametime Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

Batavi Multiple Local File Include and Cross Site Scripting Vulnerabilities

Batavi is prone to multiple local file-include and cross-site scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerabilities using directory-traversal strings to view and execute local files within the context o...

Batavi 1.0 - Multiple Local File Inclusion Cross-Site Scripting Vulnerabilities

Batavi 1.0 - Multiple Local File Inclusion Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46467/info Batavi is prone to multiple local file-include and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...

mySeatXT 0.164 - lang Local File Inclusion

mySeatXT 0.164 - lang Local File Inclusion source: https://www.securityfocus.com/bid/46507/info mySeatXT is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...

Photopad 1.2 - Multiple Cross-Site Scripting Vulnerabilities

Photopad 1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46385/info Photopad is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

Dokeos 1.8.6 2 - 'style' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46370/info Dokeos is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

TaskFreak! 0.6.4 - print_list.php Multiple Cross-Site Scripting Vulnerabilities

TaskFreak! 0.6.4 - printlist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46350/info TaskFreak! is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...

Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46337/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities

Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46337/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

PHPXref 0.7 - 'nav.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in th...