480 matches found
WordPress W3 Total Cache Plugin <= 0.9.4 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "Cache key" in the HTML-Comments. Solution Update the plugin...
W3 Total Cache 0.9.4 - Edge Mode Enabling CSRF
The W3 Total Cache WordPress plugin was affected by an Edge Mode Enabling CSRF security vulnerability...
WordPress W3 Total Cache plugin <= 0.9.4 - Cross-Site Request Forgery (CSRF) vulnerability
WordPress W3 Total Cache plugin's "admin.php" is prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the WordPress W3 Total...
WordPress Plugin W3 Total Cache - admin.php Cross-Site Request Forgery
WordPress Plugin W3 Total Cache - admin.php Cross-Site Request Forgery source: https://www.securityfocus.com/bid/69745/info W3 Total Cache plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to perform...
WordPress Plugin W3 Total Cache - 'admin.php' Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/69745/info W3 Total Cache plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to perform unauthorized actions in the context of a logged-in user of the affected...
W3 Total Cache 0.9.2.4 - Username & Hash Extract
The W3 Total Cache WordPress plugin was affected by an Username & Hash Extract security vulnerability...
Wordpress W3 Total Cache PHP Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Hughes Technologies Mini SQL (mSQL) 2.0.11 w3-msql Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/898/info w3-msql is a cgi-program shipped with Mini-SQL which acts as a web interface for msql. There are a number of buffer overflow vulnerabilities in it with one proven to be exploitable. The exploitable buffer is the...
W3-mSQL Error Page Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27116/info W3-mSQL is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
openSUSE Security Update : emacs and depending packages (openSUSE-SU-2012:1348-1)
This update fixes the following issues for emacs, emacs-w3, gnuplot and ddskk: emacs : - Add fix for bnc775993 which disable arbitrary lisp code execution when 'enable-local-variables' is set to ':safe' CVE-2012-3479 - Add fix for bnc780653 to allow emacs to parse tar archives with PAX extended...
W3 Total Cache Plugin Remote Code Execution
Remote code execution vulnerability in W3 Total Cache Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
W3-Total-Cache Wordpress-plugin Username and Hash Extract (CVE-2012-6077)
An information disclosure vulnerability has been reported in W3 Total Cache Plugin for Wordpress...
WordPress Semper Fi Cross Site Scripting
------------------------------------------------------------------------ Vendor: Semper Fi Web Design http://semperfiwebdesign.com/ Software: All in One SEO Pack Developer: Michael Torbert http://michaeltorbert.com/ Product URL: http://wordpress.org/plugins/all-in-one-seo-pack/ Changelog:...
WordPress Plugin w3-total-cache Stored XSS Vulnerability
Exploit for php platform in category web applications Steps to Produce the Vulnerability : 1 Go to Dashboard. 2 Click on Installed Plugins. 3 Go to W3-Total-Cache Plugin and Click on settings. 4 Go to Reverse Proxy and Click on page cache settings. 5 Go to Cache Preload and Type Vector - ". in...
Wordpress W3 Total Cache PHP Code Execution
A remote code execution vulnerability has been reported in Wordpress plugin W3 Total Cache.The vulnerability is due to the handling of certain macros such as mfunc, which allows arbitrary PHP code injection...
WordPress W3 Total Cache plugin <= 0.9.2.8 - PHP Code Execution vulnerability
W3 Total Cache plugin is prone to a PHP code execution vulnerability because of the handling of certain macros such as "mfunc" that allows arbitrary PHP code injection. Solution Update the WordPress W3 Total Cache plugin to the latest available version at least 0.9.2.9...
WordPress Plugin W3 Total Cache - PHP Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Wordpress W3 Total Cache PHP Code...
Wordpress W3 Total Cache PHP Code Execution Vulnerability
This Metasploit module exploits a PHP Code Injection vulnerability against Wordpress plugin W3 Total Cache for versions up to and including 0.9.2.8. WP Super Cache 1.2 or older is also reported as vulnerable. The vulnerability is due to the handling of certain macros such as mfunc, which allows...
Wordpress W3 Total Cache PHP Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Wordpress W3 Total Cache PHP Code...
WordPress W3 Total Cache PHP Code Execution
This module exploits a PHP Code Injection vulnerability against WordPress plugin W3 Total Cache for versions up to and including 0.9.2.8. WP Super Cache 1.2 or older is also reported as vulnerable. The vulnerability is due to the handling of certain macros such as mfunc, which allows arbitrary PH...