8308 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...
CVE-2011-5257
Multiple cross-site scripting XSS vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 twitterid parameter related to the Twitter widget and 2 facebookid parameter related to the Facebook widget...
PayPal.com Cross Site Scripting
Title: ====== Paypal Bug Bounty 20 - Persistent Web Vulnerabilities Date: ===== 2013-01-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=682 PayPal UID: fxv444khi VL-ID: ===== 682 Common Vulnerability Scoring System: ==================================== 3.5...
CVE-2011-4618
Cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2011-4618
Cross-site scripting XSS vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2011-4618
The CVE-2011-4618 entry concerns a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Advanced Text Widget (file advancedtext.php) before version 2.0.2. The underlying issue is improper handling of the page parameter, allowing remote attackers to inject arbitrary web script or HTML ...
Paypal Bug Bounty #20 - Persistent Web Vulnerabilities
Document Title: =============== Paypal Bug Bounty 20 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=682 PayPal UID: fxv444khi Release Date: ============= 2013-01-24 Vulnerability Laboratory ID VL-ID:...
Paypal Bug Bounty #20 - Persistent Web Vulnerabilities
Document Title: =============== Paypal Bug Bounty 20 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=682 PayPal UID: fxv444khi Release Date: ============= 2013-01-24 Vulnerability Laboratory ID VL-ID:...
Scientific Linux Security Update : gtk2 on SL5.x i386/x86_64 (20130108)
An integer overflow flaw was found in the X BitMap XBM image file loader in GTK+. A remote attacker could provide a specially crafted XBM image file that, when opened in an application linked against GTK+ such as Nautilus, would cause the application to crash. CVE-2012-2370 This update also fixes...
gtk2 security update
CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...
Information disclosure
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
CVE-2013-0721
Affected software: WordPress WP PHP Widget Plugin, version 1.0.2. Vulnerable component: wp-php-widget.php. Issue: Full Path Disclosure via a direct request, causing an error message to reveal the server path. Impact: Information disclosure; no exploitation details provided in the documents. Root ...
CVE-2013-0721
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
WordPress WP PHP Widget Plugin <= 1.0.2 - Full Path Disclosure
This vulnerability is in the wp-php-widget.php. It allows the attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Solution Update the plugin...
Comodo Internet Security authentication bypass
It's possible to access settings without enteing password if desktop widget is enabled...
Wordpress Themes grou-random-image-widget Full Path Disclosure
Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- grou-random-image-widget Full Path Disclosure vulnerability ------------------------------------------------------------------------------- Autho...
Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability
Document Title: =============== Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=774 Release Date: ============= 2012-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 7...
WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities
Advisory: WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities Advisory ID: SSCHADV2012-016 Author: Stefan Schurtz Affected Software: Successfully tested on Quick Post Widget 1.9.1 Vendor URL: http://qpw.famvanakkeren.nl/ Vendor Status: informed CVE-ID:...
Fedora Update for vte FEDORA-2012-9575
Check for the Version of vte OpenVAS Vulnerability Test Fedora Update for vte FEDORA-2012-9575 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...