EUVD-2008-0701

Malware in sbrugna...

CVE-2008-0691

Multiple cross-site scripting XSS vulnerabilities in adminpanel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 wpfootnotescurrentsettingspriority, 2 wpfootnotescurrentsettingsstylerules, 3...

CVE-2008-0691

CVE-2008-0691 affects the WordPress plugin WP-Footnotes (v2.2) by Simon Elvery. The vulnerability is multiple cross-site scripting (XSS) in admin_panel.php, exploitable via the parameters wp_footnotes_current_settings[priority], [style_rules], [pre_footnotes], and [post_footnotes]. The issue is d...

wpfootnotes-multi.txt

Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1 No Access Control. An attacker can access the adminpanel of the footnotes. http://site.tld/wordpress/wp-content/plugins/wp-footnotes/adminpanel.php The result - Many XSS...