EUVD-2014-9164

Malware in sbrugna...

WordPress Plugin SPNbabble Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. Multiple cross-site request forgery vulnerabilities in WordPress plugin SPNbabble 1.4.1 and earlier versions allow remote attackers to hijac...

CVE-2014-9339

Multiple cross-site request forgery CSRF vulnerabilities in the SPNbabble plugin 1.4.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 username or 2 password parameter in the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the SPNbabble plugin 1.4.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 username or 2 password parameter in the...

CVE-2014-9339

CVE-2014-9339 affects the WordPress SPNbabble plugin (versions up to and including 1.4.1). The vulnerability is a CSRF flaw that can allow an attacker to hijack an administrator’s authentication for requests that trigger XSS, via the username or password parameters in spnbabble.php leading to wp-...

CVE-2014-9339

Multiple cross-site request forgery CSRF vulnerabilities in the SPNbabble plugin 1.4.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 username or 2 password parameter in the...

Spnbabble <= 1.4.1 - Multiple CSRF

Plugin is still affected and has been closed...

WordPress SPNbabble 1.4.1 CSRF / XSS

Title: CSRF/XSS Vulnerability in SPNbabble WP Plugin Author: Manideep K CVE-ID: CVE-2014-9339 Plugin Homepage: https://wordpress.org/plugins/spnbabble/ Version Affected: 1.4.1 probably lower versions Severity: High About Plugin: SPNbabble http://spnbabble.sitepronews.com allows users to create an...

WordPress SPNbabble Plugin <= 1.4.1 - Multiple CSRF and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution This plugin is closed...