Monday, November 12, 2012

Vulnerabilities in WP E-Commerce plugin for WordPress


DefenseCode released Security Advisory DC-2012-11-001 to address an issue that affects Wordpress WP E-Commerce Plugin, one which has more than 2 million downloads and is one of the most popular for WordPress. Advisory covered multiple vulnerabilities that were discovered during the security audit of the mentioned plugin. All vulnerabilities were discovered using DefenseCode's ThunderScan PHP, web application source code security analyzer. Bugs found by ThunderScan are High risk SQL injections and Cross Site Scripting which attacker can use to compromise the targeted system. DefenseCode has contacted the vendor and the vulnerabilities are fixed in the latest WP e-Commerce release (3.8.9.1).

You can find more details about the advisory here.

Soon, we’ll release a lot more vulnerabilities discovered by our ThunderScan software. Also, we’ll release a few interesting 0day vulnerabilities not related to web applications, so make sure that you’re subscribed to our RSS feed.

Regards,
DefenseCode

44 comments:

  1. Because of the modifying planet along with continual completely new information security research papers engineering that you can get, professionals must have to know the specific engineering which could boost success in their corporation.

    ReplyDelete
  2. This blog is so nice to me. I will continue to come here again and again. Visit my link as well. Good luck
    http://www.jualobataborsiherbal.com/ obat aborsi
    http://caramenggugurkankandungan.info/ cara menggugurkan kandungan
    http://www.jualobataborsiherbal.com/cara-menggugurkan-kandungan/ cara menggugurkan kandungan
    http://jualobatpenggugurkandungan.net/ obat penggugur kandungan
    http://tandatandakehamilan.net/ tanda tanda kehamilan
    http://tandatandakehamilan.net/cara-cepat-dan-selamat-menggugurkan-kandungan/ cara menggugurkan kandungan
    http://obataborsi59.com/ obat aborsi
    http://obattelatdatangbulan.info/ obat telat datang bulan
    http://klinikobataborsi.com/ jual obat aborsi

    ReplyDelete
  3. Aside from the reliability of the brand, the best e-commerce business solutions are also well and heavily advertised. blackbird software services

    ReplyDelete
  4. The article you have shared here very good. This is really interesting information for me. Thanks for sharing!
    hotmail login |hotmail sign in |free hotmail login

    ReplyDelete
  5. فرصة لسكان واهل المدينة المنورة الان بالمدينة المنورة شركة شراء اثاث مستعمل بالمدينة المنورة
    متخصصون فى شراء جميع انواع اثاث وعفش المنازل المستعمل بالمدينة المنورة نشترى غرف النوم المستعملة
    نشترى اطقم الكنب المستعملة والبطرمة والسجاد وشراء الاجهزة الكهربائية المستعملة شراء المطابخ
    بافضل اسعار السوق شراء الاثاث الميتعمل بالمدينة المنورة اتصل بنا يصلك مندوبنا نقوم بتحميل الاثاث
    المستعمل بايدى عمالنا وندفع لك ثمن اثاثك فى يدك بمجردالاتصال بنا


    شركة شراء اثاث مستعمل بالمدينه المنوره


    https://www.facebook.com/mostamalco

    الاثاث المستعمل بالمدينة المنورة

    شراء الاثاث المستعمل بالمدينة المنورة


    شراء الاثاث المستعمل بالمدينة المنورة


    شراء الاثاث المستعمل بالمدينة المنورة




    شركة شراء اثاث مستعمل بالمدينه المنوره



    شركة شراء اثاث مستعمل بالطائف

    شراء الاثاث المستعمل بالطائف



    شركة شراء اثاث مستعمل بتبوك
    شراء الاثاث المستعمل بتبوك




    شركة شراء اثاث مستعمل بالمنطقة الشرقية بالدمام والخبر
    شراء الاثاث المستعمل بالدمام



    شراء الاثاث المستعمل باالخبر


    شراء الاثاث المستعمل بالدمام


    ReplyDelete
  6. Aspiring to become an amazing blog writer like the writer of this blog.
    OMC cobra parts

    ReplyDelete
  7. By reading this article I get a lot of lessons and this is very useful . cara menggugurkan kandungan

    ReplyDelete
  8. Great blog and you are always provided with access to provide useful information like this to us.

    word-cookies-answers.com

    ReplyDelete
  9. I love to read this post and found this website very beneficial
    I also have Blog on Happy wheels where you enjoy Free Happy Wheels Game
    happy wheels||happywheels.in||happy wheels game||fireboy and watergirl

    ReplyDelete
  10. I am aware that everybody must say precisely the same thing, but I just feel that you set it inside a way that everyone can comprehend. If you want click here for games

    ReplyDelete
  11. You don't need to spend a fortune getting a website developed for you. You can do it yourself, even if you have never had any experience. Thankfully, there is a secret - WordPress. https://edkentmedia.com/website-design-toronto

    ReplyDelete
  12. Congrats you individuals are doing with this blog site. print profits bonuses

    ReplyDelete
  13. Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work. Mercury 15 hp

    ReplyDelete
  14. How To Turn Your MARKETING From Zero To Hero - https://www.reviewengin.com/

    ReplyDelete
  15. Lots of game slots only here Top gaming slots Do not wait! Win right here and now.

    ReplyDelete
  16. Супер отличная гибкая світлодіодна стрічка на любой вкус и цвет, обычно покупаю в интернет магазине.

    ReplyDelete
  17. 90minup ข่าวกีฬา ฟุตบอล ผลบอล วิเคราะห์บอล พรีเมียร์ลีก ฟุตบอลไทย
    ข่าวกีฬา
    ตารางคะแนน
    ฟุตบอลไทย
    ไฮไลท์ฟุตบอล
    ดูบอลออนไลน์
    ผลบอลสด
    90minup

    ReplyDelete
  18. Adtrics Academy Awards: 5 Reasons Why They Don't Work & What You Can Do About It - https://www.reviewengin.com/adtrics-academy-review/

    ReplyDelete
  19. What Can You Do To Save Your FOREX From Destruction By Social Media?
    https://www.reviewengin.com/forex-duality-review/

    ReplyDelete
  20. Hi there, You've done an incredible job. I will definitely digg it and in my view suggest to my friends.I am sure they will be benefited from this web site. run 3

    ReplyDelete
  21. Hey, very nice site. I came across this on Google, and I am stoked that I did. I will definitely be coming back here more often. Wish I could add to the conversation and bring a bit more to the table, but am just taking in as much info as I can at the moment. Thanks .

    DedicatedHosting4u.com


    ReplyDelete
  22. Most of the time I don’t make comments on websites, but I'd like to say that this article really forced me to do so. Really nice post! ecommercechinaagency.com

    ReplyDelete
  23. When we need a network monitoring tool that is easy to install, and supports monitoring and reporting out of the box, we like SolarWinds® Network Performance Monitor (NPM) NPM acts as a single pane of glass to provide complete and comprehensive network monitoring capabilities that complement some of the essential free tools you may already use. The nice part about this type of advertising is that it is not so easily ignored compared to a banner ad. The native ad takes form into an interesting blog post or infographic. To become an authoritative presence in your niche, you need to build trust and authority across many platforms through the content you create and present in front of your audience. There are also several other mistakes regarding the use of visuals in your blog post, which I discussed in detail in 7 Blogging Mistakes to Avoid in 2018.

    Entrepreneurs can pick up the best content about earning money online and building efficient sites on IncomeDiary. If you consider the number of citations for those papers, a measure of the influence they have in the scientific community, America does better—it placed third internationally, while China comes in fifth (Sweden and Switzerland took the top spots). Google Adwords allows you to exploit people's need to find answers to their questions via online search, and deliver your content directly, by placing your ad on top of the search list. Read more about email marketing and the importance of headlines in your email marketing, in this post by Christine Brady and check out my free webinar here about how I use email marketing to make sales. Yeah the personal bloggers in this list really did a good job at transitioning from a personal blog to a media company. https://www.reviewengin.com/100k-shout-out-review/

    ReplyDelete
  24. I am very interested in this post, everyone should know it more, wish you success. The author of this post is admirable, it brings a lot of emotion to everyone reading it, let's share it more widely.
    free friv Games 2019, jogos io online, abcya 10, cá koi mini

    ReplyDelete
  25. Social media traffic is perfect for marketers looking to expand their brand awareness by promoting shareable, useful content. If you're having trouble finding affiliate programs , think about the products and services you currently use. Just like Facebook, LinkedIn Ads offers advanced targeting options. Every time a user clicks the affiliate's link, the affiliate receives a compensation. I've been asked a lot over the years, what is the best paid traffic ad network to buy traffic for my website. First mention of the product, positioning it in relation to the problem, with a link to a sales page. Many businesses organize themselves around some sort of hierarchy or bureaucracy, where positions in a company have established roles and responsibilities. She runs a blog about marketing, so she's promoting offers that her audience would care about — links to free guide and whitepaper downloads as well as the opportunity to sign up for a conference.

    Here's what some typical affiliate links look like. Because a search results page could return several of these sites, all with the same content, thin affiliates create a frustrating user experience. Below are the lists of best paid social media traffic source. Once your affiliate marketing business starts to picks up steam, you can start thinking about paid advertising. But with social forum ads such as Reddit Ads and Quora ads, you don't have to spend time writing or trying to build a community. It doesn't cost anything to the business to recruit affiliates. We've had some clients that really wanna look at A cost, or on Google they call it, you know, marketing cost of sale, or whatever. You can always hire some social media company or online websites which work on targeted advertising on social media and Blogs. https://www.reviewengin.com/overnight-freedom-review/


    ReplyDelete
  26. Nice blog, thanks for sharing with us this interesting blog. Visit OGEN Infosystem for Website Designing and PPC Services in Delhi, India.
    PPC Service in Delhi

    ReplyDelete