EUVD-2014-9217

Malware in sbrugna...

WordPress Plugin SimpleFlickr Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.SimpleFlickr plugin is a plugin to support the picture information will be posted to Flickr. The WordPress plugin...

SimpleFlickr 3.0.3 - CSRF & XSS

The simpleflickr WordPress plugin was affected by a CSRF & XSS security vulnerability...

CVE-2014-9396

Multiple cross-site request forgery CSRF vulnerabilities in the SimpleFlickr plugin 3.0.3 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simpleflickrwidth, 2 simpleflickrbgcolor, ...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the SimpleFlickr plugin 3.0.3 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simpleflickrwidth, 2 simpleflickrbgcolor, ...

CVE-2014-9396

The CVE-2014-9396 entry concerns WordPress SimpleFlickr plugin versions up to 3.0.3 (and earlier). The vulnerability is a CSRF that can hijack administrator authentication to perform requests that trigger cross‑site scripting via three parameters in simpleFlickr.php (simpleflickr_width, simplefli...

CVE-2014-9396

Multiple cross-site request forgery CSRF vulnerabilities in the SimpleFlickr plugin 3.0.3 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simpleflickrwidth, 2 simpleflickrbgcolor, ...

WordPress SimpleFlickr 3.0.3 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in SimpleFlickr Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9396 Plugin Homepage: https://wordpress.org/plugins/simpleflickr/ Version Affected: 3.0.3 probably lower versions Severity: High Description: Vulnerable Parameter: id & parameter -...

WordPress SimpleFlickr Plugin <= 3.0.3 - Multiple CSRF and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution This plugin is closed...