527 matches found
[SECURITY] [DLA 1096-1] wordpress-shibboleth security update
Package : wordpress-shibboleth Version : 1.4-2+deb7u1 CVE ID : CVE-2017-14313 Debian Bug : 874416 It was discovered that there was a an XSS vulnerability in the login form of the "Shibboleth" identity provider module for Wordpress. For Debian 7 "Wheezy", this issue has been fixed in...
WordPress Shibboleth Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports the hosting of personal blog sites on servers running PHP and MySQL.The Shibboleth plugin is one of the plugins used to integrate Wordpress sites into existing identity...
DLA-1096-1 wordpress-shibboleth - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3973-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
DEBIAN-CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
UBUNTU-CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
CVE-2017-14313
CVE-2017-14313 applies to the Shibboleth WordPress plugin (pre-1.8). The vulnerability is a cross-site scripting flaw in the shibboleth_login_form function caused by improper use of add_query_arg(), enabling injection of arbitrary script/HTML. Public advisories (DSA-3973-1, Debian announcements) ...
CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
CVE-2017-14313
The shibbolethloginform function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of addqueryarg...
Denial Of Service (DoS) Through Cross-site Request Forgery (CSRF)
Moodle is vulnerable to denial of service DoS attacks. A malicious user can forge a request to logout users through auth/shibboleth/logout.php...
Drupal Shibboleth authentication module access bypass vulnerability
Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Shibboleth Authentication is one of the user login and get access to the authentication module . An access bypass vulnerability exists in the Drupal Shibboleth authentication module...
shib_auth Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-043
This module enables you to login via Shibboleth. The module doesn't sufficiently logout the user when the shib session expires, which depending on the caching mechanism makes private data public. This vulnerability is mitigated by the fact that shibauth would have to be used in combination with a...
Unspecified SQL Injection Vulnerability in TYPO3 Shibboleth Authentication Extension
TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. An unspecified SQL injection vulnerability exists in the TYPO3 Shibboleth Authentication extension, which could allow an attacker to take control of an application, access or modify data, or explo...
Shibboleth <= 1.7 - Cross-Site Scripting (XSS)
The Shibboleth WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
