34 matches found
CVE-2009-4168
CVE-2009-4168 is an XSS in Roy Tanck tagcloud.swf used by WP-Cumulus plugin (WordPress) and Joomulus module; tagcloud parameter in a tags action enables remote script/HTML injection. Affected: WP-Cumulus before 1.23 and Joomulus 2.0 and earlier. Root cause: tagcloud.swf parameter handling allows ...
CVE-2009-4169
Cross-site scripting XSS vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4170
CVE-2009-4170 affects the WP-Cumulus WordPress plugin (1.20 and possibly other versions). A remote attacker can trigger a crafted request to wp-cumulus.php (likely without parameters) to cause an error message that reveals the installation path, constituting information disclosure with partial co...
Vulnerabilities in WP-Cumulus for WordPress
Hello Bugtraq! I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
Vulnerabilities in WP-Cumulus for WordPress
No description provided by source. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS: http://site/wp-content/plugins/wp-cumulus/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3 ...
WordPress WP-Cumulus <= 1.20 Vulnerabilities
Exploit for unknown platform in category web applications =================================================== Vulnerabilities in WP-Cumulus = 1.20 for WordPress =================================================== I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress...
WordPress WP-Cumulus <= 1.20 - Vulnerabilities
There are several vulnerabilities in this WordPress WP-Cumulus: cross-site scripting and full path disclosure vulnerabilities. Solution Update the WordPress...
Vulnerabilities in WP-Cumulus <= 1.20 for WordPress
No description provided by source. I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://server/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure / Cross-Site Scripting
I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://server/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure Cross-Site Scripting
WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure Cross-Site Scripting I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure:...
WP-Cumulus 1.20 Cross Site Scripting
Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS: http://site/wp-content/plugins/wp-cumulus/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3Ca+href='javascript:alertdocument.cookie'+style='font-size:+40pt'%3EClick%20me%3C/a%3E%3C/tags%3E...
Vulnerabilities in WP-Cumulus for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине WP-Cumulus для WordPress. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
WordPress WP-Cumulus Plugin 1.x - Cross-Site Scripting Vulnerability
WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability. It is caused by the application fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker...
WordPress Plugin WP-Cumulus 1.x - tagcloud.swf Cross-Site Scripting
WordPress Plugin WP-Cumulus 1.x - tagcloud.swf Cross-Site Scripting source: https://www.securityfocus.com/bid/37100/info The WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...