4662 matches found
WordPress IGIT Posts Slider Widget Plugin 1.0 - Cross-Site Scripting
IGIT Posts Slider Widget plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...
WordPress Plugin IGIT Posts Slider Widget 1.0 - 'src' Cross-Site Scripting
source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...
Sql injection
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-2422
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-2422
CVE-2008-2422 affects Web Slider 0.6, where an SQL injection in index.php via the slide parameter in a slides action allows remote attackers to execute arbitrary SQL commands. The CVSS base score is 7.5 (HIGH). Exploitation details are not provided in the documents. No remediation or patch inform...
CVE-2008-2422
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Web Slider 0.6 - 'slide' SQL Injection
source: https://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Web Slider 0.6 - slide SQL Injection
Web Slider 0.6 - slide SQL Injection source: https://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
CVE-2008-2298
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...
Authentication flaw
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...
CVE-2008-2298
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...
CVE-2008-2298
CVE-2008-2298 affects Web Slider 0.6. The vulnerability arises in Admin.php where a remote attacker can bypass authentication and gain elevated privileges by setting the admin cookie to 1. The issue is a cookie-based auth bypass, enabling unauthorized access to privileged functionality. The provi...
Web Slider <= 0.6 Insecure Cookie/Authentication Handling Vuln
No description provided by source. --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==-- --==+================================================================================+==-- Discovered...
Web Slider 0.6 - Insecure CookieAuthentication Handling
Web Slider 0.6 - Insecure CookieAuthentication Handling --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==--...
Web Slider <= 0.6 Insecure Cookie/Authentication Handling Vuln
Exploit for unknown platform in category web applications ============================================================== Web Slider = 0.6 Insecure Cookie/Authentication Handling Vuln ==============================================================...
Web Slider 0.6(path)Remote File Inclusion Vulnerabilities
Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell Exploit:Path/plugins/highlight.php?path=Shell...
CVE-2007-2067
Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider WebSlider 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 index.php, 2 modules/pdf.php, 3 plugins/highlight.php, or 4 include/modules.php...
Web Slider 0.6 (path) Remote File Inclusion Vulnerabilities
No description provided by source. Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell...
webslider-rfi.txt
Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell Exploit:Path/plugins/highlight.php?path=Shell...
Web Slider 0.6 - path Remote File Inclusion
Web Slider 0.6 - path Remote File Inclusion Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell...