5643 matches found
PT-2014-6160
Name of the Vulnerable Software and Affected Versions Meta Slider plugin version 2.5 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter to "wp-admin/admin.php". Recommendations For Meta Slider plugin version 2.5, avoid usin...
CVE-2014-4846: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...
WordPress Meta Slider Plugin <= 2.5 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter to wp-admin/admin.php. Solution Update the plugin...
Web Slider <= 0.6 Insecure Cookie/Authentication Handling Vuln
No description provided by source. --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==-- --==+================================================================================+==-- Discovered...
WordPress Social Slider plugin <= 5.6.5 - SQL Injection Vulnerability
No description provided by source. Exploit Title: Social Slider = 5.6.5 SQL Injection Vulnerability Date: 2011-08-05 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/social-slider-2.zip Version: 5.6.5 tested --------------- PoC PO...
Web Slider 0.6 - 'slide' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
WordPress ml-slider 2.5 Cross Site Scripting
Exploit Title : Wordpress ml-slider 2.5 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/ml-slider Software Link : downloads.wordpress.org/plugin/ml-slider.2.5.zip Date : 2014-06-27 Tested on : Windows 7 / Mozilla Firefox Location...
Wordpress TimThumb 2.8.13 WebShot - Remote Code Execution Exploit
Exploit for php platform in category web applications | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components...
Multiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) - 'WebShot' Remote Code Execution
| | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components Exploit Author : @u0x Pichaya Morimoto Release dates :...
Drupal Nivo Slider Module模块跨站脚本漏洞
Bugtraq ID:66327 Drupal是一套开放源码的内容管理平台。 Drupal Nivo Slider模块没有正确过滤图像标题数据，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Drupal Nivo Slider Module 7.x Drupal Nivo Slider Module 7.x-1.11已经修复该漏洞，建议用户下载更新： http://drupal.org/project/nivoslider...
SA-CONTRIB-2014-033 - Nivo Slider - Cross Site Scripting
Nivo Slider provides a way to showcase featured content. Nivo Slider gives administrators a simple method of adding slides to the slideshow, an administration interface to configure slideshow settings, and simple slider positioning using the Drupal block system. The module doesn't sufficiently...
Wordpress Image News slider plugin v3.5 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
7: bypass of the security level setting in browser plugin (Deployment, SE-2012-01 Issue 53)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and...
CVE-2013-1489
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and...
Security feature bypass
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and...
XSS Vulnerability in Simple Slider Wordpress Plugin
Exploit Title : Simple Slider Plugin Cross-Site Scripting Vulnerabilities Author: Aditya Balapure home: http://adityabalapure.blogspot.in/ Date: 21/11/12 version: 1.0 software link: http://wordpress.org/extend/plugins/simple-slider Simple Slider plugin description Simple Slider Plugin for WordPre...
WordPress Simple Slider 1.0 Cross Site Scripting
Exploit Title : Simple Slider Plugin Cross-Site Scripting Vulnerabilities Author: Aditya Balapure home: http://adityabalapure.blogspot.in/ Date: 21/11/12 version: 1.0 software link: http://wordpress.org/extend/plugins/simple-slider Simple Slider plugin description Simple Slider Plugin for WordPre...
CVE-2012-4327
Unspecified vulnerability in the Image News slider plugin before 3.3 for WordPress has unspecified impact and remote attack vectors...
