EUVD-2012-6356

Malware in sbrugna...

EUVD-2012-3977

Malware in sbrugna...

WordPress Zingiri Web Shop Plugin <= 2.4.3 - Shell Upload

This plugin is prone to a shell upload vulnerability. Solution Update the plugin...

WordPress Zingiri Web Shop Plugin <= 2.3.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Zingiri Web Shop Plugin <= 2.6.4 - Unspecified Vulnerability

This plugin is prone to mform.php unspecified issue. Solution Update the plugin...

Zingiri Web Shop 2.2.0 - init.inc wpabspath Parameter Remote File Inclusion

The zingiri-web-shop WordPress plugin was affected by an init.inc wpabspath Parameter Remote File Inclusion security vulnerability...

Zingiri Web Shop <= 2.2.3 - ajax_file_cut.php selectedDoc Parameter Remote PHP Code

The g-web-shop WordPress plugin was affected by an ajaxfilecut.php selectedDoc Parameter Remote PHP Code security vulnerability...

Zingiri Web Shop - Cookie SQL Injection

The zingiri-web-shop WordPress plugin was affected by a Cookie SQL Injection security vulnerability...

Zingiri Web Shop 2.6.4 - mform.php Unspecified Issue

The zingiri-web-shop WordPress plugin was affected by a mform.php Unspecified Issue security vulnerability...

Zingiri Web Shop <= 2.4.0 - zing.inc.php page Parameter XSS

The zingiri-web-shop WordPress plugin was affected by a zing.inc.php page Parameter XSS security vulnerability...

Zingiri Web Shop <= 2.4.0 - onecheckout.php notes Parameter XSS

The zingiri-web-shop WordPress plugin was affected by an onecheckout.php notes Parameter XSS security vulnerability...

Wordpress Zingiri Web Shop Plugin 2.2.0 - Remote File Inclusion

No description provided by source. Exploit Title: Zingiri Web Shop Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/zingiri-web-shop Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress Zingiri Web Shop插件未明安全漏洞

WordPress是一款内容管理系统。 该漏洞由未明原因引起，目前没有详细信息。 0 WordPress Zingiri Web Shop Plugin 2.x WordPress Zingiri Web Shop Plugin 2.6.5版本以修复此漏洞，建议用户下载使用： http://wordpress.org/plugins/zingiri-web-shop/changelog/...

CVE-2012-6506

Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...

CVE-2012-6506

Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...

CVE-2012-6506

The CVE applies to the WordPress Zingiri Web Shop Plugin (

WordPress Zingiri Web Shop Plugin 2.5.0 - Arbitrary File Upload

WordPress Chenpress plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...

WordPress Zingiri Web Shop 2.5.0 Shell Upload

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Zingiri-web-shop 2.5.0 Plugin | Arbitrary File Upload Vulnerability | Version: 2.5.0 Software Link: www.zingiri.com/plugins-and-addons/web-shop/ Google Dork: inurl:"/wp-content/plugins/zingiri-web-shop/" Exploit...

WordPress Plugin Zingiri Web Shop - path Arbitrary File Upload

WordPress Plugin Zingiri Web Shop - path Arbitrary File Upload source: https://www.securityfocus.com/bid/56659/info The Zingiri Web Shop plugin for WordPress is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may...