8 matches found
EUVD-2015-9317
Malware in sbrugna...
CVE-2015-9477
The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...
WordPress Vernissage theme elevation of privilege vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Vernissage theme is a photography showcase website theme plugin used in it. WordPress Vernissage theme has an elevation of privilege...
CVE-2015-9477
The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...
Input validation
The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...
CVE-2015-9477
The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...
CVE-2015-9477
The CVE-2015-9477 entry relates to WordPress Vernissage theme version 1.2.8, where insufficient restrictions on option updates enable privilege escalation. The vulnerability allows authenticated users to update options (e.g., default role/registration state), potentially taking over the site. Doc...
WordPress Vernissage Theme <= 1.2.8 - Privilige Escalation
Because of this privilege escalation vulnerability, the attackers can update options and execute commands on the server. Solution Update the theme...