WordPress Sniplets 漏洞列表

共找到 2 个与 WordPress Sniplets 相关的漏洞

📅 加载漏洞趋势中...

CVE-2008-1059: WordPress Sniplets 1.1.2 - Local File Inclusion POC

日期: 2025-08-01 | 影响软件: WordPress Sniplets

PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.
CVE-2008-1061: WordPress Sniplets <=1.2.2 - Cross-Site Scripting POC

日期: 2025-08-01 | 影响软件: WordPress Sniplets

WordPress Sniplets 1.1.2 and 1.2.2 plugin contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the text parameter to warning.php, notice.php, and inset.php in view/sniplets/, and possibly modules/execute.php; via the url parameter to view/admin/submenu.php; and via the page parameter to view/admin/pager.php.