4608 matches found
WordPress Social Slider Plugin <= 5.6.5 - SQL Injection
This WordPress Social Slider plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
SQL injection in Social Slider
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Social Slider, which can be exploited to perform SQL injection attacks. 1 SQL Injection Vulnerability in Social Slider Input passed via the "rA" POST parameter to /wp-content/plugins/social-slider-2/ajax.php is not properly...
Social Slider < 7.4.2 - SQL Injection
The social-slider WordPress plugin was affected by a SQL Injection security vulnerability...
html_edit CMS 3.1.9 Cross Site Scripting
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
WordPress IGIT Posts Slider Widget 1.0 Cross Site Scripting
------------------------------------------------------------------------ Software................WordPress IGIT Posts Slider Widget 1.0 Vulnerability...........Reflected Cross-site Scripting Download................http://www.hackingethics.com/blog/wordpress-plugins/igit-posts-slider-widget/...
WordPress IGIT Posts Slider Widget Plugin 1.0 - Cross-Site Scripting
IGIT Posts Slider Widget plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...
WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting
WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker m...
WordPress Plugin IGIT Posts Slider Widget 1.0 - 'src' Cross-Site Scripting
source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...
CVE-2008-2422
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-2422
CVE-2008-2422 affects Web Slider 0.6, where an SQL injection in index.php via the slide parameter in a slides action allows remote attackers to execute arbitrary SQL commands. The CVSS base score is 7.5 (HIGH). Exploitation details are not provided in the documents. No remediation or patch inform...
CVE-2008-2422
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Web Slider 0.6 - slide SQL Injection
Web Slider 0.6 - slide SQL Injection source: https://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
Web Slider 0.6 - 'slide' SQL Injection
source: https://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Authentication flaw
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...
CVE-2008-2298
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...
CVE-2008-2298
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...
CVE-2008-2298
CVE-2008-2298 affects Web Slider 0.6. The vulnerability arises in Admin.php where a remote attacker can bypass authentication and gain elevated privileges by setting the admin cookie to 1. The issue is a cookie-based auth bypass, enabling unauthorized access to privileged functionality. The provi...
Web Slider <= 0.6 Insecure Cookie/Authentication Handling Vuln
No description provided by source. --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==-- --==+================================================================================+==-- Discovered...
Web Slider 0.6 - Insecure CookieAuthentication Handling
Web Slider 0.6 - Insecure CookieAuthentication Handling --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==--...