garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Vulnerable plugin updates. See Issue #264

Browse Source
This commit is contained in:
ethicalhack3r
2013-08-23 12:55:04 +02:00
parent a97f9cd695
commit f704efb2af
1 changed files with 25 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
data/plugin_vulns.xml
View File

@@ -1466,6 +1466,12 @@
</plugin>
<plugin name="download-monitor">
<vulnerability>
<title>CVE-2013-5098: Download Monitor &lt; 3.3.6.2 Cross Site Scripting</title>
<reference>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5098</reference>
<type>XSS</type>
<fixed_in>3.3.6.2</fixed_in>
</vulnerability>
<vulnerability>
<title>Download Monitor &lt;= 3.3.5.7 Cross Site Scripting</title>
<reference>http://www.reactionpenetrationtesting.co.uk/wordpress-download-monitor-xss.html</reference>
@@ -5014,7 +5020,7 @@
<plugin name="duplicator">
<vulnerability>
<title>Duplicator installer.cleanup.php package Parameter XSS</title>
<title>CVE-2013-4625: Duplicator installer.cleanup.php package Parameter XSS</title>
<reference>http://osvdb.org/95627</reference>
<type>XSS</type>
<fixed_in>0.4.5</fixed_in>
@@ -5048,4 +5054,22 @@
</vulnerability>
</plugin>
<plugin name="xhanch-my-twitter">
<vulnerability>
<title>CVE-2013-3253: CSRF in admin/setting.php in Xhanch</title>
<reference>https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3253</reference>
<type>CSRF</type>
<fixed_in>2.7.7</fixed_in>
</vulnerability>
</plugin>
<plugin name="sexybookmarks">
<vulnerability>
<title>CVE-2013-3256: CSRF in sexybookmarks</title>
<reference>http://wordpress.org/plugins/sexybookmarks/changelog/</reference>
<type>CSRF</type>
<fixed_in>6.1.5.0</fixed_in>
</vulnerability>
</plugin>
</vulnerabilities>