darksecurity.de | Entries tagged as xss

SSCHADV2013-004 - WordPress Plugin 'Feedweb 1.8.8' Cross-site Scripting vulnerability

Posted by Stefan Schurtz on Tuesday, April 2. 2013

Advisory:	WordPress Plugin ‘Feedweb 1.8.8’ Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2013-004
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Feedweb 1.8.8
Vendor URL:	http://wordpress.org/extend/plugins/feedweb/
Vendor Status:	fixed
CVE-ID:	CVE-2013-2753

======================
Vulnerability Description
======================

The WordPress plugin ‘Feedweb 1.8.8’ is prone to a XSS vulnerability

Posted by Stefan Schurtz on Wednesday, February 13. 2013

Advisory:	www.friendscout24.de – Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2012-025
Author:	Stefan Schurtz
Affected Software:	Successfully tested on www.friendscout24.de
Vendor URL:	http://www.friendscout24.de
Vendor Status:	fixed

======================
Vulnerability Description
======================

http://www.friendscout24.de is prone to a XSS vulnerability

Posted by Stefan Schurtz on Tuesday, February 5. 2013

Advisory:	www.parship.de – Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2012-026
Author:	Stefan Schurtz
Affected Software:	Successfully tested on www.parship.de
Vendor URL:	http://www.parship.de
Vendor Status:	fixed

======================
Vulnerability Description
======================

http://www.parship.de is prone to a Cross-site Scripting vulnerability

Posted by Stefan Schurtz on Sunday, February 3. 2013

Today, my new article about some XSS findings on four single portals was published on the website Sicherheit-Online.org

And here is the direct link to the article – click me

Enjoy yourself :)

Posted by Stefan Schurtz on Saturday, January 19. 2013

Advisory:	www.datingcafe.de – Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2012-027
Author:	Stefan Schurtz
Affected Software:	Successfully tested on www.datingcafe.de
Vendor URL:	http://www.datingcafe.de
Vendor Status:	fixed

======================
Vulnerability Description
======================

http://www.datingcafe.de is prone to a Cross-site Scripting vulnerability

Posted by Stefan Schurtz on Saturday, January 12. 2013

Advisory:	t-online.de eMail Center – Cross-Site Request Forgery & XSS vulnerabilities
Advisory ID:	SSCHADV2012-099
Author:	Stefan Schurtz
Affected Software:	Successfully tested on email.t-online.de
Vendor URL:	http://www.t-online.de
Vendor Status:	fixed

======================
Vulnerability Description
======================

http://email.t-online.de is prone to multiple CSRF and XSS vulnerabilities