Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 capcheck parameter to directories.php or 2 keyword parameter to proxy.php...

CVE-2014-1855

Multiple cross-site scripting XSS vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 capcheck parameter to directories.php or 2 keyword parameter to proxy.php...

CVE-2014-1855

Seo Panel 3.x is affected by two XSS vulnerabilities (CVE-2014-1855) in 3.4.0 and earlier. The issues arise from insufficient sanitisation of user-supplied data in the capcheck parameter (directories.php) and the keyword parameter (proxy.php), enabling remote code execution in the victim’s browse...

Seo Panel 3.4.0 Cross Site Scripting Vulnerability

Seo Panel version 3.4.0 suffers from a cross site scripting vulnerability...

Seo Panel 3.4.0 Cross Site Scripting

Advisory ID: HTB23200 Product: Seo Panel Vendor: www.seopanel.in Vulnerable Versions: 3.4.0 and probably prior Tested Version: 3.4.0 Advisory Publication: January 29, 2014 without technical details Vendor Notification: January 29, 2014 Vendor Patch: May 15, 2014 Public Disclosure: May 16, 2014...

Seo Panel - file Directory Traversal

Seo Panel - file Directory Traversal source: https://www.securityfocus.com/bid/67911/info Seo Panel is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequence...

Seo Panel - 'file' Directory Traversal

source: https://www.securityfocus.com/bid/67911/info Seo Panel is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequences '../' to retrieve arbitrary files i...

Two Cross-Site Scripting (XSS) Vulnerabilities in Seo Panel

High-Tech Bridge Security Research Lab discovered two vulnerabilities in Seo Panel, which can be exploited to perform Cross-Site Scripting XSS attacks agains users of the vulnerable application to steal their sensitive data. 1 Two Cross-Site Scripting XSS in Seo Panel: CVE-2014-1855 1.1 The...

WordPress Seo Link Rotator 'title' Parameter Cross Site Scripting Vulnerability

WordPress Seo Link Rotator Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Seo Link Rotator Cross Site Scripting

Exploit Title : Wordpress Seo Link Rotator Plugin Cross Site Scripting Exploit Author : ACC3SS Vendor Homepage : http://www.seolinkrotator.com Software Link : http://www.seolinkrotator.com/download/files/seolinkrotator.zip Date : 2014-01-19 Tested on : Windows 7 / Mozilla Firefox Web Browser...

MetInfo m topology enterprise website management system is inserted Backdoor-vulnerability warning-the black bar safety net

About“MetInfo m topology enterprise website management system” MetInfo enterprise website management system using PHP+Mysql schema, full Station built-in SEO search engine optimization mechanism, support user since defined interface languageglobal various language, has enterprise website common o...

WordPress plugins wp-seo-spy-google Remote Code Execution

Exploit for php platform in category web applications Exploit Title: WordPress plugins wp-seo-spy-google Remote Code Execution Google Dork: inurl:/wp-content/plugins/wp-seo-spy-google/ Exploit Author: Index Php Tested on: Windows, PHP 5.2 exploit http://target.com/ ? @settimelimit0; $site =...

WordPress SEO Watcher Remote Code Execution Vulnerability

WordPress SEO Watcher plugin remote code execution exploit. Exploit Title: seo-watcher plugins execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/seo-watcher/ inurl:wp-content/plugins/seo-watcher/ Date: 03-10-2013 Exploit Author: wantexz Vendor Homepage:http://wordpress.org...

WordPress SEO Watcher Plugin - Arbitrary PHP Code Execution

SEO Watcher plugin's "ofcuploadimage.php" is prone to an arbitrary PHP code execution vulnerability. It allows an attacker to execute arbitrary PHP code within the context of the web server. Solution Upgrade the plugin...

WordPress Plugin SEO Watcher - 'ofc_upload_image.php' Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62825/info The SEO Watcher plugin for WordPress is prone to an arbitrary PHP code-execution vulnerability. An attacker can exploit this issue to execute arbitrary PHP code within the context of the web server. "; $headers = array'User-Agent: Mozilla/5.0...

WordPress SEO Watcher Remote Code Execution

Exploit Title: seo-watcher plugins execute arbitrary PHP code Exploit Google Dork: inurl:/wp-content/plugins/seo-watcher/ inurl:wp-content/plugins/seo-watcher/ Date: 03-10-2013 Exploit Author: wantexz Vendor Homepage:http://wordpress.org/ Software Link: http://wordpress.org// Version:...

WordPress Semper Fi Cross Site Scripting

------------------------------------------------------------------------ Vendor: Semper Fi Web Design http://semperfiwebdesign.com/ Software: All in One SEO Pack Developer: Michael Torbert http://michaeltorbert.com/ Product URL: http://wordpress.org/plugins/all-in-one-seo-pack/ Changelog:...

CVE-2013-5961

Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in lazy-seo/...

Unrestricted file upload

Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in lazy-seo/...

WordPress Platinum SEO Plugin < 1.3.8 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...