Added new CVE's. Update #572

This commit is contained in:
Peter
2014-07-31 12:39:12 +02:00
parent 13bc347897
commit 191b4402e1

View File

@@ -10483,6 +10483,26 @@
</plugin>
<plugin name="polldaddy">
<vulnerability>
<title>Polldaddy Polls and Rating 2.0.24 - polldaddy-org.php unique_id Ratings Shortcode XSS</title>
<references>
<osvdb>108640</osvdb>
<cve>2014-4856</cve>
<secunia>59323</secunia>
<url>http://www.securityfocus.com/bid/68512</url>
</references>
<type>XSS</type>
<fixed_in>2.0.25</fixed_in>
</vulnerability>
<vulnerability>
<title>Polldaddy Polls and Rating 2.0.23 - polldaddy-org.php polldaddy-ratings-title-filter Parameter Reflected XSS</title>
<references>
<osvdb>108641</osvdb>
<url>http://www.securityfocus.com/bid/68512</url>
</references>
<type>XSS</type>
<fixed_in>2.0.24</fixed_in>
</vulnerability>
<vulnerability>
<title>Polldaddy Polls and Ratings 2.0.20 - Cross-Site Request Forgery Vulnerability</title>
<references>
@@ -13739,4 +13759,40 @@
</vulnerability>
</plugin>
<plugin name="wp-construction-mode">
<vulnerability>
<title>Construction Mode 1.8 - under-construction.php wuc_logo Parameter XSS</title>
<references>
<osvdb>108630</osvdb>
<cve>2014-4954</cve>
<secunia>58932</secunia>
<url>http://packetstormsecurity.com/files/127287/</url>
<url>http://www.securityfocus.com/bid/68287</url>
</references>
<type>XSS</type>
</vulnerability>
</plugin>
<plugin name="polylang">
<vulnerability>
<title>Polylang 1.5.1 - User Description Handling Stored XSS</title>
<references>
<osvdb>108634</osvdb>
<cve>2014-4955</cve>
<secunia>59357</secunia>
<url>http://www.securityfocus.com/bid/68509</url>
</references>
<type>XSS</type>
<fixed_in>1.5.2</fixed_in>
</vulnerability>
<vulnerability>
<title>Polylang 1.4.5 - Multiple Unspecified Issues</title>
<references>
<osvdb>108953</osvdb>
</references>
<type>MULTI</type>
<fixed_in>1.5</fixed_in>
</vulnerability>
</plugin>
</vulnerabilities>