BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Vulnerabilities in WP-Cumulus for WordPress Nov 24 2009 09:55PM
MustLive (mustlive websecurity com ua)
Hello Bugtraq!

I want to warn you about security vulnerabilities in plugin WP-Cumulus for
WordPress.

These are Full path disclosure and Cross-Site Scripting vulnerabilities.

Full path disclosure:

http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php

XSS:

http://site/wp-content/plugins/wp-cu...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus