diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml index 1c5fcdbf..46daea39 100644 --- a/data/plugin_vulns.xml +++ b/data/plugin_vulns.xml @@ -2201,12 +2201,30 @@ - Multiple XSS vulnerabilities in All-in-One Event Calendar for WordPress + All-in-One Event Calendar 1.4 - Multiple XSS vulnerabilities http://seclists.org/bugtraq/2012/Apr/70 XSS + + All-in-One Event Calendar 1.9 - wp-admin/post-new.php Multiple Parameter XSS + + 96271 + 54038 + + XSS + 1.10 + + + All-in-One Event Calendar 1.9 - index.php Multiple Parameter SQL Injection + + 96272 + 54038 + + SQLI + 1.10 + @@ -2308,35 +2326,38 @@ - Count per Day Plugin 3.2.5 (counter.php) - XSS Vulnerability + Count per Day 3.2.5 - counter.php XSS Vulnerability + 90893 24859 + 52436 + http://packetstormsecurity.com/files/120649/ XSS - Count Per Day 3.2.3 Cross Site Scripting + Count Per Day 3.2.3 - Cross Site Scripting http://packetstormsecurity.com/files/115904/ XSS - Count Per Day 3.1.1 Cross Site Scripting + Count Per Day 3.1.1 - Cross Site Scripting http://packetstormsecurity.com/files/114787/ XSS - Count Per Day plugin <= 3.1.1 Multiple Vulnerabilities + Count Per Day <= 3.1.1 - Multiple Vulnerabilities 18355 MULTI - Count per Day plugin <= 2.17 SQL Injection Vulnerability + Count per Day <= 2.17 - SQL Injection Vulnerability 17857 @@ -6580,6 +6601,7 @@ CSRF in admin/setting.php in Xhanch + 96027 53133 2013-3253 @@ -7105,4 +7127,17 @@ + + + A Forms 1.4.1 - Form Submission CSRF + + 96381 + 54489 + + + CSRF + 1.4.2 + + +