48 matches found
WordPress Plugin HD Webplayer 1.1 - SQL Injection
| | | | \ | | | \ /\ | | | | | | | | | | | | / \ | |/ / | ' \ | | | . | | | | / / /\ \ | | / | | | | | | | | || |\ | | | | | \ \ / \ |||,|| || || ||| | || || \// \ - JoinSe7en +----------------------------------------------------------------------+ | Wordpress HD Webplayer 1.1 SQL Injection...
WordPress HD Webplayer Plugin 1.1 - SQL Injection Vulnerability
This WordPress HD Webplayer plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
Plugin HD Webplayer <= 1.1 - SQL Injections
The last time it was checked the plugin was still affected and had been closed. PoC http://example.com/wp-content/plugins/hd-webplayer/config.php?id=INJECT HERE http://example.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=INJECT HERE...
Plugin HD Webplayer <= 1.1 - SQL Injections
The last time it was checked the plugin was still affected and had been closed. http://example.com/wp-content/plugins/hd-webplayer/config.php?id=INJECT HERE http://example.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=INJECT HERE...
ImageShack Service - Cross Site Scripting Vulnerability
Document Title: =============== ImageShack Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=352 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== 352...
WebPlayer ActiveX控件拒绝服务漏洞
WebPlayer 2010是一款网络视频播放软件,它具有三个控件CVGPlayer55,CVGPlayer60,CVGPlayer70,当恶意网页中OBJECT标签的style属性：width=130或height=74时,实例化这三个控件将引起CPU占用率上升,IE崩溃. WebPlayer 20100226 设置下列CLSID的KillBit...
CVE-2009-1792
StoneTrip Ston3D products and players are vulnerable to a remote code/injection flaw in system.openURL, allowing arbitrary command execution via crafted sURL. Affected: S3DPlayer StandAlone v1.6.2.4, v1.7.0.1 and S3DPlayer Web v1.6.0.0. Root cause: the scripting function system.openURL does not p...
