Wordpress Zingiri Web Shop Plugin <= 2.4.2 Persistent XSS

No description provided by source. Wordpress Zingiri Web Shop Plugin = 2.4.2 Stored XSS Exploit Title: Wordpress Zingiri Web Shop Plugin = 2.4.0 Stored XSS Google Dork: Date: 30 Apr 2012 Author: Mehmet Ince Twitter: https://twitter.com/!/mmetince Company: Bilgi Guvenligi Akademisi www.bga.com.tr...

CVE-2012-6506

The CVE applies to the WordPress Zingiri Web Shop Plugin (

PT-2013-1970

Name of the Vulnerable Software and Affected Versions Zingiri Web Shop plugin version 2.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the page parameter in zing.inc.php or the notes parameter in fws/pages-front/onecheckout.php...

PT-2012-5158

Name of the Vulnerable Software and Affected Versions Zingiri Web Shop plugin versions prior to 2.4.0 Description The issue concerns multiple unspecified vulnerabilities in the Zingiri Web Shop plugin for WordPress. The impact and attack vectors of these vulnerabilities are unknown. Recommendatio...

WordPress Zingiri Web Shop Plugin <= 2.3.9 - Multiple vulnerabilities

This plugin has unknown impact and attack vectors. Solution Update the plugin...

WordPress Plugin Zingiri 2.2.3 - ajax_save_name.php Remote Code Execution

WordPress Plugin Zingiri 2.2.3 - ajaxsavename.php Remote Code Execution get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45...