WordPress Easy Testimonials 1.36.1 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Easy Testimonials WordPress Plugin ------------------------------------------------------------------------ Bente Schopman, July 2016...

Easy Testimonials <= 1.36.1 - Authenticated Stored Cross-Site Scripting (XSS)

The Easy Testimonials WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

WordPress Easy Testimonials Plugin <= 1.36.1 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Testimonials 1.0 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Souk Naamane 0 1 + Support e-mail :...

guidedcare.org XSS vulnerability

Vulnerable URL: http://www.guidedcare.org/testimonials.asp?video=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13068891 Google...

HMS Testimonials 2.0.10 - CSRF

The HMS Testimonials WordPress plugin was affected by a CSRF security vulnerability...

HMS Testimonials 2.0.10 - XSS

The HMS Testimonials WordPress plugin was affected by a XSS security vulnerability...

WordPress Collision Testimonials plugin <= 3.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Collision Testimonials plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/collision-testimonials.zip Version: 3.0...

dMx READY (25 Products) Remote Database Disclosure Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

osCommerce Addon Customer Testimonials 3.1 - SQL Injection Vulnerability

No description provided by source. osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:customertestimonials.php Exploit:...

Joomla NijnaMonials Component (com_ninjamonials) Blind SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comninjamonials BSqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://ninjaforge.com/ Author :...

Wordpress HMS Testimonials Plugin 2.0.10 - Multiple Vulnerabilities

No description provided by source. Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/...

CVE-2013-4240

Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...

CVE-2013-4240

The CVE-2013-4240 entry concerns the WordPress HMS Testimonials plugin, affected in versions before 2.0.11. The vulnerability set consists of multiple CSRF flaws that allow an attacker to hijack an administrator’s authenticated session and perform actions such as adding testimonials, adding group...

PT-2014-2766

Name of the Vulnerable Software and Affected Versions HMS Testimonials plugin versions prior to 2.0.11 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including adding new testimonials via the "hms-testimonials-addnew" page, addin...

CVE-2013-4240: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...

[RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities

Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request Forgery CWE-352 - Cross-Site Scripting CWE-79...

WordPress Hms Testimonials Plugin 2.0.10 - Multiple Vulnerabilities

Hms Testimonials plugin is prone to multiple vulnerabilities, such as cross-site scripting and cross-site request forgery vulnerabilities. Solution Update the plugin...

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner...