Wordpress Slider Revolution Responsive <= 4.1.4 Arbitrary File Download

Exploit for php platform in category web applications Exploit Title : Wordpress Slider Revolution Responsive = 4.1.4 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium...

Social Slider <= 5.6.5 - social-slider-2/ajax.php rA Parameter SQL Injection

The social-slider-2 WordPress plugin was affected by a social-slider-2/ajax.php rA Parameter SQL Injection security vulnerability...

Image slider with description - Unspecified

The Image slider with description WordPress plugin was affected by an Unspecified security vulnerability...

Really Easy Slider 0.1 - Shell Upload

The really-easy-slider WordPress plugin was affected by a Shell Upload security vulnerability...

Image News Slider 3.2 - Multiple Unspecified Remote Issues

The wp-image-news-slider WordPress plugin was affected by a Multiple Unspecified Remote Issues security vulnerability...

Simple Slider 1.0 - New Image URL Field XSS

The Simple Slider WordPress plugin was affected by a New Image URL Field XSS security vulnerability...

WordPress Slider Revolution Responsive 4.1.4 File Download

 Exploit Title : Wordpress Slider Revolution Responsive = 4.1.4 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium plugin Dork Google: revslider.php "index of" Date ...

CVE-2014-4846

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

CVE-2014-4846

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

CVE-2014-4846

CVE-2014-4846 refers to a Cross-Site Scripting (XSS) vulnerability in the Meta Slider (ml-slider) WordPress plugin version 2.5. The issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php. Concrete details show the affected software componen...

WordPress Meta Slider Plugin <= 2.5 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter to wp-admin/admin.php. Solution Update the plugin...

WordPress Social Slider plugin <= 5.6.5 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Social Slider = 5.6.5 SQL Injection Vulnerability Date: 2011-08-05 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/social-slider-2.zip Version: 5.6.5 tested --------------- PoC PO...

Web Slider <= 0.6 Insecure Cookie/Authentication Handling Vuln

No description provided by source. --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==-- --==+================================================================================+==-- Discovered...

Web Slider 0.6 - 'slide' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

WordPress ml-slider 2.5 Cross Site Scripting

Exploit Title : Wordpress ml-slider 2.5 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/ml-slider Software Link : downloads.wordpress.org/plugin/ml-slider.2.5.zip Date : 2014-06-27 Tested on : Windows 7 / Mozilla Firefox Location...

Wordpress TimThumb 2.8.13 WebShot - Remote Code Execution Exploit

Exploit for php platform in category web applications | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components...

Multiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) - 'WebShot' Remote Code Execution

| | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components Exploit Author : @u0x Pichaya Morimoto Release dates :...

Drupal Nivo Slider Module模块跨站脚本漏洞

Bugtraq ID:66327 Drupal是一套开放源码的内容管理平台。 Drupal Nivo Slider模块没有正确过滤图像标题数据，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Drupal Nivo Slider Module 7.x Drupal Nivo Slider Module 7.x-1.11已经修复该漏洞，建议用户下载更新： http://drupal.org/project/nivoslider...

SA-CONTRIB-2014-033 - Nivo Slider - Cross Site Scripting

Nivo Slider provides a way to showcase featured content. Nivo Slider gives administrators a simple method of adding slides to the slideshow, an administration interface to configure slideshow settings, and simple slider positioning using the Drupal block system. The module doesn't sufficiently...