8950 matches found
CVE-2013-0721
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
CVE-2013-0721
Affected software: WordPress WP PHP Widget Plugin, version 1.0.2. Vulnerable component: wp-php-widget.php. Issue: Full Path Disclosure via a direct request, causing an error message to reveal the server path. Impact: Information disclosure; no exploitation details provided in the documents. Root ...
PT-2013-2559
Name of the Vulnerable Software and Affected Versions WP PHP widget plugin version 1.0.2 Description The issue allows remote attackers to obtain sensitive information via a direct request. This is achieved by revealing the full path in an error message. No information is available about the...
WordPress WP PHP Widget Plugin <= 1.0.2 - Full Path Disclosure
This vulnerability is in the wp-php-widget.php. It allows the attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Solution Update the plugin...
Comodo Internet Security authentication bypass
It's possible to access settings without enteing password if desktop widget is enabled...
CVE-2013-0721: Exposure of Sensitive Information to an Unauthorized Actor
wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
Wordpress Themes grou-random-image-widget Full Path Disclosure
Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- grou-random-image-widget Full Path Disclosure vulnerability ------------------------------------------------------------------------------- Autho...
Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability
Document Title: =============== Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=774 Release Date: ============= 2012-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 7...
PT-2012-3812
Name of the Vulnerable Software and Affected Versions BuddyPress plugin versions 1.5.x through 1.5.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in an activity widget filter action. Recommendations For BuddyPress plugin...
WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities
Advisory: WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities Advisory ID: SSCHADV2012-016 Author: Stefan Schurtz Affected Software: Successfully tested on Quick Post Widget 1.9.1 Vendor URL: http://qpw.famvanakkeren.nl/ Vendor Status: informed CVE-ID:...
Fedora Update for vte FEDORA-2012-9575
Check for the Version of vte OpenVAS Vulnerability Test Fedora Update for vte FEDORA-2012-9575 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
WordPress Rich Widget File Upload
. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: Wordpress Rich Widget Arbitrary File Upload Vulnerability Google Dork: inurl:wp-content/plugins/rich-widget Date: 08/22/2012 Author: Crim3R download Link :...
WordPress Rich Widget Plugin - Arbitrary File Upload
WordPress Rich Widget plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...
WordPress Plugin Rich Widget - Arbitrary File Upload
WordPress Plugin Rich Widget - Arbitrary File Upload source: https://www.securityfocus.com/bid/55174/info The Rich WidgetPlugin for WordPress is prone to an arbitrary file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web...
WordPress Plugin Rich Widget - Arbitrary File Upload
source: https://www.securityfocus.com/bid/55174/info The Rich WidgetPlugin for WordPress is prone to an arbitrary file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access...
CVE-2012-1835: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to app/view/agenda-widget-form.php; 2 args, 3 title, 4 beforetitle, or 5 aftertitle parameter...
PT-2012-3579
Name of the Vulnerable Software and Affected Versions All-in-One Event Calendar plugin versions 1.4 and 1.5 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameter...
WordPress Quick Post Widget 1.9.1 Cross Site Scripting
Advisory: WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities Advisory ID: SSCHADV2012-016 Author: Stefan Schurtz Affected Software: Successfully tested on Quick Post Widget 1.9.1 Vendor URL: http://qpw.famvanakkeren.nl/ Vendor Status: informed CVE-ID:...
WordPress Quick Post Widget Plugin <= 1.9.1 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Wordpress Mini Mail Dashboard Widget 1.42 Stored XSS
Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to...