| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-4538 | 4.3 | Cross-site scripting (XSS) vulnerability in process.php in the Malware Finder plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the query parameter. | 2014-07-02 15:18:00 | 2014-07-01 14:55:00 |
| CVE-2014-4533 | 4.3 | Cross-site scripting (XSS) vulnerability in ajax_functions.php in the GEO Redirector plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the hid_id parameter. | 2014-07-02 15:04:00 | 2014-07-01 14:55:00 |
| CVE-2014-4528 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in admin/swarm-settings.php in the Bugs Go Viral : Facebook Promotion Generator (fbpromotions) plugin 1.3.4 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML vi | 2014-07-02 14:59:00 | 2014-07-01 14:55:00 |
| CVE-2014-4521 | 4.3 | Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. | 2014-07-02 13:59:00 | 2014-07-01 14:55:00 |
| CVE-2014-4518 | 4.3 | Cross-site scripting (XSS) vulnerability in xd_resize.php in the Contact Form by ContactMe.com plugin 2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter. | 2014-07-02 13:32:00 | 2014-07-01 14:55:00 |
| CVE-2014-4516 | 4.3 | Cross-site scripting (XSS) vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter. | 2014-07-02 13:24:00 | 2014-07-01 14:55:00 |
| CVE-2014-4513 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or ( | 2014-07-01 18:34:00 | 2014-07-01 14:55:00 |
| CVE-2014-2934 | 7.5 | Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php. | 2014-07-01 17:57:00 | 2014-05-08 10:55:00 |
| CVE-2014-2933 | 5.0 | Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname. | 2014-07-01 17:56:00 | 2014-05-08 10:55:00 |
| CVE-2013-7061 | 5.5 | Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API. | 2014-06-30 22:12:00 | 2014-05-02 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: