EUVD-2015-9299

Malware in sbrugna...

WordPress searchterms-tagging-2 plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. searchterms-tagging-2 is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

WordPress searchterms-tagging-2 plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. searchterms-tagging-2 is an SEO Search Engine Optimization plugin used in it. The WordPress searchterms-tagging-2 plugin suffers...

CVE-2015-9459

The CVE-2015-9459 entry concerns the WordPress plugin searchterms-tagging-2 (through version 1.535) and describes a cross-site scripting (XSS) vulnerability exploitable via the wp-admin/options-general.php count parameter. Affected component: the searchterms-tagging-2 plugin for WordPress. Root c...

CVE-2015-9458: Improper Neutralization of Special Elements used in an SQL Command

The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pkstt2dbgetpopularterms count parameter exploitable via CSRF...

PT-2019-7418

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the count parameter in the wp-admin/options-general.php API endpoint. This allows for potential...

PT-2019-7417

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier for WordPress Description The issue concerns SQL injection via the count parameter in the pk stt2 db get popular terms function, which is exploitable via CSRF. This allows for potential...

CVE-2015-9459: Improper Neutralization of Input During Web Page Generation

The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter...

SEO SearchTerms Tagging 2 <= 1.535 - XSS & Authenticated SQL Injection

Plugin is still affected and has been closed...

WordPress SearchTerms Tagging Plugin <= 2 1.535 - Authenticated SQL Injection

Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Upgrade the plugin...

WordPress SearchTerms Tagging Plugin <= 2 1.535 - Authenticated SQL Injection

Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Upgrade the plugin...

Cross site scripting

Cross-site scripting XSS vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024...

CVE-2008-5193

CVE-2008-5193 describes a Cross-site scripting (XSS) vulnerability in W1L3D4 Philboard, specifically in the file search.asp for versions 1.14 and 1.2. The underlying issue allows an attacker to inject arbitrary web script or HTML via the searchterms parameter. The related CVE notes a potential ov...

CVE-2008-5193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation aka an admin category search...

CVE-2008-2178: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation aka an admin category search...

LifeType searchTerms参数跨站脚本漏洞

BUGTRAQ ID: 29017 LifeType是一款开放源码的博客平台。 LifeType的admin.php文件中没有正确过滤searchTerms参数输入便返回给了管理员，如果将op设置为editArticleCategories的话，允许远程攻击者通过跨站脚本攻击导致在管理员浏览器会话环境中执行任意HTML和脚本代码。 LifeType 1.2.7 LifeType -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://prdownloads.sourceforge.net/lifetype/lifetype-1.2.8.tar....

CVE-2008-1306

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...

CVE-2008-1306: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Savvy Content Manager CM allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to 1 searchresults.cfm, 2 searchresults.cfm, and 3 searchresults/index.cfm. NOTE: the provenance of this information is unknown...