WordPress Rich Widget Plugin - Arbitrary File Upload

WordPress Rich Widget plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...

WordPress Plugin Rich Widget - Arbitrary File Upload

source: https://www.securityfocus.com/bid/55174/info The Rich WidgetPlugin for WordPress is prone to an arbitrary file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access...

WordPress Rich Widget File Upload

. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: Wordpress Rich Widget Arbitrary File Upload Vulnerability Google Dork: inurl:wp-content/plugins/rich-widget Date: 08/22/2012 Author: Crim3R download Link :...

WordPress Plugin Rich Widget - Arbitrary File Upload

WordPress Plugin Rich Widget - Arbitrary File Upload source: https://www.securityfocus.com/bid/55174/info The Rich WidgetPlugin for WordPress is prone to an arbitrary file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web...

WordPress Quick Post Widget 1.9.1 Cross Site Scripting

Advisory: WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities Advisory ID: SSCHADV2012-016 Author: Stefan Schurtz Affected Software: Successfully tested on Quick Post Widget 1.9.1 Vendor URL: http://qpw.famvanakkeren.nl/ Vendor Status: informed CVE-ID:...

WordPress Quick Post Widget Plugin <= 1.9.1 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Wordpress Mini Mail Dashboard Widget 1.42 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to...

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May...

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...

Fedora Update for vte FEDORA-2012-9546

Check for the Version of vte OpenVAS Vulnerability Test Fedora Update for vte FEDORA-2012-9546 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

WordPress MoodThingy Widget 0.9.7 SQL Injection

Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection Date: 7/2/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.moodthingy.com/ Software Link: http://downloads.wordpress.org/plugin/moodthingy-mood-rating-widget.0.8.7.zip Version: 0.8.7 =====================...

WordPress MoodThingy Widget 0.8.7 - Blind SQL Injection

MoodThingy Widge plugin is prone to a Blind SQL injection vulnerability. Because of this vulnerability, true statements will result in the rating being updated, while false statements will cause the plugin to hang. Solution Update the plugin...

WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection

Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection Date: 7/2/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.moodthingy.com/ Software Link: http://downloads.wordpress.org/plugin/moodthingy-mood-rating-widget.0.8.7.zip Version: 0.8.7 =====================...

WordPress MoodThingy Widget v0.8.7 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection Date: 7/2/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.moodthingy.com/ Software Link:...

WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection

WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection Date: 7/2/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.moodthingy.com/ Software Link:...

[SECURITY] Fedora 16 Update: vte-0.28.2-6.fc16

VTE is a terminal emulator widget for use with GTK+ 2.0...

WordPress Website FAQ Plugin v1.0 SQL Injection

No description provided by source. Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip Version: 1.0...

WordPress Plugin Website FAQ 1.0 - SQL Injection

WordPress Plugin Website FAQ 1.0 - SQL Injection Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip Version...

WordPress Website FAQ Plugin v1.0 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip...

WordPress Website FAQ 1.0 SQL Injection

Exploit Title: WordPress Website FAQ Plugin v1.0 SQL Injection Date: 6/25/12 Exploit Author: Chris Kellum Vendor Homepage: http://wordpress.org/extend/plugins/website-faq/ Software Link: http://downloads.wordpress.org/plugin/website-faq.zip Version: 1.0...