PRODUCT PROFILE

hdw-tube

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2016-10001352016/10/10

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via mychannel.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

hdw-tubePoC 已收录

CVSS6.1EPSS 2.2%

中危CVE-2016-10001342016/10/10

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via playlist.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

hdw-tubePoC 已收录

CVSS6.1EPSS 2.2%