1030 matches found
[waraxe-2012-SA#092] - Multiple Vulnerabilities in Wordpress Slideshow Plugin
waraxe-2012-SA092 - Multiple Vulnerabilities in Wordpress Slideshow Plugin =============================================================================== Author: Janek Vind "waraxe" Date: 17. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-92.html Description of vulnerab...
WordPress Slideshow Plugin <= 2.1.12 Multiple Vulnerabilities - Active Check
WordPress Slideshow Plugin is prone to multiple cross-site scripting XSS and full path disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
WordPress Slideshow 2.1.12 Cross Site Scripting / Path Disclosure
waraxe-2012-SA092 - Multiple Vulnerabilities in Wordpress Slideshow Plugin =============================================================================== Author: Janek Vind "waraxe" Date: 17. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-92.html Description of vulnerab...
WordPress Slideshow Plugin - Multiple Cross Site Scripting Vulnerabilities
WordPress Slideshow plugin is prone to multiple cross-site scripting vulnerabilities. These vulnerabilities allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. In that way, an attacker can steal cookie-based authentication...
WordPress Slideshow Plugin - Multiple Cross Site Scripting Vulnerabilities
WordPress Slideshow plugin is prone to multiple cross-site scripting vulnerabilities. These vulnerabilities allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. In that way, an attacker can steal cookie-based authentication...
WordPress Slideshow 2.1.12 Cross Site Scripting / Path Disclosure WordPress Slideshow 2.1.12 Cross Site Scripting / Path Disclosure
Exploit for php platform in category web applications Author: Janek Vind "waraxe" Date: 17. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-92.html Description of vulnerable target: Slideshow provides an easy way to integrate a slideshow for any WordPress installation. An...
WordPress Plugin Slideshow - Multiple Cross-Site Scripting Vulnerabilities
WordPress Plugin Slideshow - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/56090/info The Slideshow plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
WordPress Plugin Slideshow - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/56090/info The Slideshow plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
CVE-2012-5229
Cross-site scripting XSS vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the border parameter...
CVE-2012-5229
Cross-site scripting XSS vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the border parameter...
CVE-2012-5229: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the border parameter...
Code injection
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...
CVE-2012-0956
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...
CVE-2012-0956
CVE-2012-0956 affects ubiquity-slideshow-ubuntu prior to 58.2; during installation, a crafted attribute in the Twitter feed could allow remote MITM attackers to inject arbitrary web script/HTML and read files. The issue is mitigated by disabling the Twitter feed (Ubuntu USN-1561-1) and upgrading ...
CVE-2012-0956
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...
CVE-2012-0956: Undefined Security Weakness
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...
Ubuntu Update for ubiquity-slideshow-ubuntu USN-1561-1
Ubuntu Update for Linux kernel vulnerabilities USN-1561-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15611.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubiquity-slideshow-ubuntu USN-1561-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...
Ubuntu 12.04 LTS : ubiquity-slideshow-ubuntu vulnerability (USN-1561-1)
Paul Mutton discovered that ubiquity-slideshow-ubuntu incorrectly handled the Twitter feed displayed during system installation. A remote attacker could use this flaw to inject code into the Twitter feed and read arbitrary files off the filesystem during system installation. This flaw has been...
USN-1561-1: ubiquity-slideshow-ubuntu vulnerability
Paul Mutton discovered that ubiquity-slideshow-ubuntu incorrectly handled the Twitter feed displayed during system installation. A remote attacker could use this flaw to inject code into the Twitter feed and read arbitrary files off the filesystem during system installation. This flaw has been...
CVE-2012-0956
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...