Easing Slider <= 2.2.0.6 - 2 x Cross-Site Scripting (XSS)

The Easing Slider WordPress plugin was affected by a 2 x Cross-Site Scripting XSS security vulnerability...

WordPress Easing Slider 2.2.0.6 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Easing Slider WordPress Plugin Vendor: Easing Slider Vulnerable Versions: 2.2.0.6 and probably prior Tested Version: 2.2.0.6 Advisory Publication: January 21, 2015 without technical details Vendor Notification: January 21, 2015 Vendor...

WordPress Easing Slider Plugin <= 2.2.0.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "edit" parameter. Solution Upgrade the plugin...

WordPress Easing Slider Plugin <= 2.2.0.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "edit" parameter. Solution Upgrade the plugin...

PrestaShop cross-site scripting vulnerability (CNVD-2015-00700)

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the blocklayered-ajax.php script in the blocklayered...

WordPress Revolution Slider Local File Disclosure Vulnerability

WordPress Revolution Slider plugin suffers from a local file disclosure vulnerability. Note that this finding houses site-specific data. + Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage:...

WordPress Revolution Slider Local File Disclosure

Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage: https://wordpress.org/plugins/patch-for-revolution-slider/ + Tested on: windows 7 / firefox , kali linux / firefox + Vulnerable Files: /plugins/revolution-slider/ + Dork : "Index of"...

CVE-2015-1175

Cross-site scripting XSS vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layeredpriceslider parameter...

PT-2015-5146

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.6.0.9 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the layered price slider parameter in the blocklayered-ajax.php file of the...

Two Reflected XSS Vulnerabilities in Easing Slider WordPress Plugin

High-Tech Bridge Security Research Lab discovered two XSS vulnerabilities in Easing Slider WordPress plugin, which can be exploited against administrators of WordPress with the vulnerable plugin to perform Cross-Site Scripting attacks. Successful exploitation of the vulnerabilities may allow an...

SA-CONTRIB-2015-022 - nodeauthor - Cross Site Scripting (XSS) - Unsupported

This module displays node author information in a jQuery slider. The module doesn't sufficiently sanitize Profile2 fields in a provided block. This vulnerability is mitigated by the fact that an attacker must have a user account allowed to edit profile fields. CVE identifiers issued CVE-2015-3365...

Multiple Slider Plugins for WordPress 'img' Parameter Local File Inclusion Vulnerability

A Slider plugin for WordPress hosted on the remote web server is affected by a local file inclusion vulnerability due to a failure to properly sanitize user-supplied input to the 'img' parameter of the 'imageview.class.php' script. This allows an unauthenticated, remote attacker to read arbitrary...

WordPress Slider Revolution Responsive File Disclosure

File disclosure vulnerability in WordPress Slider Revolution Responsive plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Slider Revolution Responsive File Upload

File upload vulnerability in WordPress Slider Revolution Responsive plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Social Slider Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Social Slider is a social sharing button display plugin. Social Slider plugin suffers from a SQL injection vulnerability that allows remo...

PT-2015-4200

Name of the Vulnerable Software and Affected Versions Sliding Social Icons plugin version 1.61 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct cross-site scripting XSS...

CVE-2011-5286

SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter...

Sql injection

SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter...

CVE-2011-5286

The CVE-2011-5286 entry concerns the WordPress Social Slider plugin. An SQL injection exists in social-slider-2/ajax.php for versions before 7.4.2, exploitable via the rA array parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability affects the plugin’s WordPress...

CVE-2011-5286

SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter...