WordPress RokBox Plugin <= 2.13 - Multiple Vulnerabilities

This plugin is prone to multiple vulnerabilities: 1. Path Disclosure via thumb.php "src" parameter. 2. Cross site scripting in thumb.php "src" parameter. 3. Direct request path disclosure in rokbox.php. 4. Arbitrary file upload via thumb.php "src" parameter. 5. Direct request error log informatio...

WordPress Rokbox Plugin Multiple Vulnerabilities

WordPress Rokbox Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress...

WordPress Rokbox 2.13 XSS / DoS / File Upload / Path Disclosure

Hello list! I want to warn you about multiple security vulnerabilities in plugin Rokbox for WordPress. These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses...