FLV Player Content Spoofing / Cross Site Scripting

Hello list! I want to warn you about Content Spoofing and Cross-Site Scripting vulnerabilities in FLV Player. ------------------------- Affected products: ------------------------- Vulnerable are different versions of FLV Player MINI, NORMAL, MAXI and MULTI. Note, that version NORMAL occurs under...

Joomla JVClouds3D Cross Site Scripting / HTML Injection

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in JVClouds3D modjvclouds3D plugin for Joomla. Which I found at 08.01.2010. It is similar to XSS vulnerability in Joomulus for Joomla http://websecurity.com.ua/3801/. About millions of flash files tagcloud.swf which are...

Vulnerabilities in WP-Cumulus <= 1.20 for WordPress

No description provided by source. I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://server/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...

WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure / Cross-Site Scripting

I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://server/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...

Vulnerabilities in WP-Cumulus for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине WP-Cumulus для WordPress. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...