125 matches found
PT-2023-14568 · WordPress · Wp-Table Reloaded
Name of the Vulnerable Software and Affected Versions: WP-Table Reloaded WordPress plugin versions 1.9.4 and earlier Description: The issue allows users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as...
WP Table Reloaded <= 1.9.4 - Contributor+ Stored XSS
The plugin does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. Exploit...
WordPress Advanced WP Table plugin <= 1.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Advanced WP Table plugin versions = 1.2.0. Solution Update the WordPress Advanced WP Table plugin to the latest available version at least 1.2.1...
WordPress Advanced WP Table plugin <= 1.2.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Advanced WP Table plugin versions = 1.2.0. Solution Update the WordPress Advanced WP Table plugin to the latest available version at least 1.2.1...
wp-table-reloaded <= 1.9.3 - zeroclipboard.swf id Parameter XSS
The WP-Table Reloaded WordPress plugin was affected by a zeroclipboard.swf id Parameter XSS security vulnerability...
plugin wp-Table <= 1.43 - (inc_dir) RFI
The wp-table WordPress plugin was affected by a incdir RFI security vulnerability...
ZeroClipboard 1.0.7 Cross Site Scripting
Hello list! These are Cross-Site Scripting vulnerabilities in ZeroClipboard. Last week I've made my research of these vulnerabilities and informed all developers previous and current of ZeroClipboard. When I've downloaded ZeroClipboard in September 2011, when I was writing my article Attacks via...
[CVE-2013-1463]Wordpress wp-table-reloaded‏ plugin XSS in SWF
Exploit Title: Wordpress wp-table-reloaded plugin XSS in SWF Release Date: 24/01/13 Author: hip Insight-Labs Contact: [email protected] | Website: http://insight-labs.org Software Link: http://downloads.wordpress.org/plugin/wp-table-reloaded.latest-stable.zip Vendor Homepage:...
CVE-2013-1463
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
Cross site scripting
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
CVE-2013-1463
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
CVE-2013-1463
Technical details about CVE-2013-1463 are not publicly available in the provided connected documents. The Initial description contains basic context but no concrete product/vendor/version/root-cause/fix details from connected sources. Monitor for updates.
CVE-2013-1463: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
PT-2013-3149 · WordPress +1 · Wp-Table Reloaded
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability
=========================================================================================== o wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability Software : wp-Table v1.52 Vendor : http://wordpress.org/ Download : http://wordpress.org/extend/plugins/wp-table/wp-table.zip Author :...
WordPress多个插件远程文件包含漏洞
WordPress是一款免费的论坛Blog系统，wp-Table和wordTube都是其中常用的插件。 WordPress的wp-Table和wordTube插件实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 wordTube插件中wordtube-button.php文件没有正确验证wpPATH参数的输入，允许攻击者通过包含本地或外部资源的任意文件导致执行任意命令。漏洞代码如下： ----------------wordtube-button.php------------------- ... / // get and set path of functio...
Wordpress plugin wp-Table <= 1.43 (inc_dir) RFI Vulnerability
No description provided by source...
Directory traversal
Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter...
Immunity Canvas: WPTABLE_REMOTE
Name| wptableremote ---|--- CVE| CVE-2007-2484 Exploit Pack| CANVAS Description| WordPress Plugin WP-Table Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: WordPress CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2484 CVE Name: CVE-2007-2484...