CVE-2013-2842

Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets...

CVE-2013-2842

CVE-2013-2842 is referenced in multiple OpenVAS/Nessus entries tied to Apple iTunes and Safari components. Public details in the connected docs show it as part of a set of vulnerabilities affecting WebKit/libxml/libxslt in iTunes on Windows with memory corruption that could enable arbitrary code ...

CVE-2013-2842

Removed by vendor...

CVE-2013-2842: Undefined Security Weakness

Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets...

SA-CONTRIB-2013-045 - Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) - Access bypass

Autocomplete Widgets module adds autocomplete widgets for Text and Number fields. The autocomplete callback implemented by this module does not honor node permissions to access existing fields, allowing users to see field values even though they are not authorized to access that information. This...

PT-2013-1320

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 27.0.1453.93 Description The issue is related to a use-after-free vulnerability in the handling of widgets, which can be exploited by remote attackers to cause a denial of service or possibly have other...

WordPress Dynamic Widgets 1.5.1 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Plugin Dynamic Widgets 1.5.1 - themes.php Cross-Site Scripting

WordPress Plugin Dynamic Widgets 1.5.1 - themes.php Cross-Site Scripting source: https://www.securityfocus.com/bid/53513/info Dynamic Widgets plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

WordPress Plugin Dynamic Widgets 1.5.1 - 'themes.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53513/info Dynamic Widgets plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

PT-2012-3350 · Cumin · Cumin

Name of the Vulnerable Software and Affected Versions: Cumin versions prior to r5238 Description: The issue involves multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The attack vectors involve widgets or pages...

CVE-2012-1575: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

cumin: multiple XSS flaws

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

cumin: multiple XSS flaws

Multiple cross-site scripting XSS vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 widgets or 2 pages...

WordPress catablog 1.6 plugin RFI Vulnerability

Exploit for php platform in category web applications +----------------------------------------------------------------------+ Exploit Title: wordpress thecartpress plugin local file inclusion LFI Google Dork: inurl:wp-content/plugins/thecartpress/widgets/ Date: 08/04/2012 Author: Tunisian spl01t...

PT-2011-4684

Name of the Vulnerable Software and Affected Versions Pligg CMS version 1.1.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as "widgets/statistics/init.php", which reveals the...

CVE-2011-3794: Exposure of Sensitive Information to an Unauthorized Actor

Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files...

Information disclosure

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/menu/index.php and certain other files...

CVE-2011-3715

ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/statistics.php and certain other files...

PT-2011-4605

Name of the Vulnerable Software and Affected Versions ClanTiger version 1.1.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as widgets/statistics/statistics.php, which reveals the...

PT-2011-4593

Name of the Vulnerable Software and Affected Versions AneCMS version 1.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as "widgets/menu/index.php", which reveals the installation path in...