8556 matches found
CVE-2013-0721
Affected software: WordPress WP PHP Widget Plugin, version 1.0.2. Vulnerable component: wp-php-widget.php. Issue: Full Path Disclosure via a direct request, causing an error message to reveal the server path. Impact: Information disclosure; no exploitation details provided in the documents. Root ...
CVE-2013-0721
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
Comodo Internet Security authentication bypass
It's possible to access settings without enteing password if desktop widget is enabled...
WordPress WP PHP Widget Plugin <= 1.0.2 - Full Path Disclosure
This vulnerability is in the wp-php-widget.php. It allows the attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Solution Update the plugin...
CVE-2013-0721: Exposure of Sensitive Information to an Unauthorized Actor
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
Wordpress Themes grou-random-image-widget Full Path Disclosure
Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- grou-random-image-widget Full Path Disclosure vulnerability ------------------------------------------------------------------------------- Autho...
Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability
Document Title: =============== Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=774 Release Date: ============= 2012-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 7...
WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities
Advisory: WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities Advisory ID: SSCHADV2012-016 Author: Stefan Schurtz Affected Software: Successfully tested on Quick Post Widget 1.9.1 Vendor URL: http://qpw.famvanakkeren.nl/ Vendor Status: informed CVE-ID:...
Fedora Update for vte FEDORA-2012-9575
Check for the Version of vte OpenVAS Vulnerability Test Fedora Update for vte FEDORA-2012-9575 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
WordPress Rich Widget Plugin - Arbitrary File Upload
WordPress Rich Widget plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...
WordPress Plugin Rich Widget - Arbitrary File Upload
source: https://www.securityfocus.com/bid/55174/info The Rich WidgetPlugin for WordPress is prone to an arbitrary file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access...
WordPress Rich Widget File Upload
. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: Wordpress Rich Widget Arbitrary File Upload Vulnerability Google Dork: inurl:wp-content/plugins/rich-widget Date: 08/22/2012 Author: Crim3R download Link :...
WordPress Plugin Rich Widget - Arbitrary File Upload
WordPress Plugin Rich Widget - Arbitrary File Upload source: https://www.securityfocus.com/bid/55174/info The Rich WidgetPlugin for WordPress is prone to an arbitrary file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web...
CVE-2012-1835: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to app/view/agenda-widget-form.php; 2 args, 3 title, 4 beforetitle, or 5 aftertitle parameter...
WordPress Quick Post Widget 1.9.1 Cross Site Scripting
Advisory: WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities Advisory ID: SSCHADV2012-016 Author: Stefan Schurtz Affected Software: Successfully tested on Quick Post Widget 1.9.1 Vendor URL: http://qpw.famvanakkeren.nl/ Vendor Status: informed CVE-ID:...
WordPress Quick Post Widget Plugin <= 1.9.1 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting
WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May...
Wordpress Mini Mail Dashboard Widget 1.42 Stored XSS
Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to...
WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...
Fedora Update for vte FEDORA-2012-9546
Check for the Version of vte OpenVAS Vulnerability Test Fedora Update for vte FEDORA-2012-9546 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...