CVE-2012-5349

Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...

CVE-2012-5350

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...

CVE-2012-5349

The CVE refers to multiple stored/reflected XSS flaws in WordPress Pay With Tweet plugin’s pay.php, affects versions before 1.2. An attacker can inject arbitrary script/HTML via the link, title, or dl parameters, potentially impacting site integrity and user sessions. The issue is mitigated by up...

CVE-2012-1236

Multiple cross-site request forgery CSRF vulnerabilities in Janetter before 3.3.0.0 aka 3.3.0 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 tweet, 2 upload an image file, or 3 execute arbitrary commands...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Janetter before 3.3.0.0 aka 3.3.0 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 tweet, 2 upload an image file, or 3 execute arbitrary commands...

CVE-2012-1236

Multiple cross-site request forgery CSRF vulnerabilities in Janetter before 3.3.0.0 aka 3.3.0 allow remote attackers to hijack the authentication of arbitrary users for requests that 1 tweet, 2 upload an image file, or 3 execute arbitrary commands...

CVE-2012-1236

CVE-2012-1236 relates to CSRF vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0). The issue allows remote attackers to hijack user authentication to perform actions such as tweeting, uploading an image, or executing commands. Affected product: Janetter client software for Twitter (Windows and...

Pop star KE$HA twitter Hacked

Pop star KE$HA twitter Hacked Pop star KE$HA has fallen victim to internet pranksters after her Twitter.com blog was hacked on Sunday. Tweet by her account : Single out in a couple hours. Ugh so fkin stressful… wish I could stay on da the beach forever." It was potentially seen by Kesha's 3.1...

r00tw0rm leak United Nations Environment Programme database

r00tw0rm leak United Nations Environment Programme database r00tw0rm group of Hackers hack and leak the complete 82.8 MB database from The united nations environment programme UNEP, which is the voice for the environment in the united nations system. Via a tweet, r00tw0rm shout ,"United nations...

Wordpress plugin Pay With a Tweet <= 1.1 a plurality of defect and repair-vulnerability warning-the black bar safety net

Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Author: Gianluca Brindisi gATbrindi. si @gbrindisi http://brindi.si/g/ Download address: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Affect version: 1.1 1 Blind SQL Injection in shortcode: Short code parameter...

WordPress Pay With Tweet Cross Site Scripting / SQL Injection

Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...

WordPress Pay with Tweet Plugin <= 1.1 - Multiple Vulnerabilities

WordPress Pay with Tweet plugin is prone to a blind SQL injection and XSS vulnerabilities. Solution Update the plugin...

Wordpress Pay With Tweet Plugin <= 1.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...

Cross site scripting

Cross-site scripting XSS vulnerability in the "official twitter tweet button for your page" tweetbutton extension before 1.0.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress Plugin Tweet Old Post 3.2.5 - SQL Injection

WordPress Plugin Tweet Old Post 3.2.5 - SQL Injection Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL:...

WordPress Tweet Old Post Plugin <= 3.2.5 - SQL Injection

Tweet Old Post plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Tweet Old Post 3.2.5 SQL Injection

Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL: http://localhost/wordpress/wp-admin/admin.php?page=ExcludePosts POST Data:...

WordPress Tweet Old Post plugin <= 3.2.5 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL:...