OSVDB: Open Sourced Vulnerability Database

Creditee: Chris Kellum

Known Contact Information:

None at this time

Known Affiliations:

None at this time

Disclosed Vulnerabilities (7):

Disc. Date	OSVDB ID	Title
2012-08-13	84749	RSVPMaker Plugin for WordPress index.php RSVP Form Multiple Field XSS
2012-08-05	84462	WP Lead Management Plugin for WordPress index.php Multiple Parameter XSS
2012-07-13	83807	Resume Submissions & Job Postings Plugin for wp-content/plugins/resume-submissions-job-postings/includes/form.php File Upload PHP Code Execution
2012-07-10	83697	WP-Predict Plugin for WordPress index.php Multiple Parameter SQL Injection
2012-07-02	83632	MoodThingy Mood Rating Widget Plugin for WordPress wp-admin/admin-ajax.php Multiple Parameter lydl_store_results() Function SQL Injection
2012-06-30	83768	Paid Business Listings Plugin for WordPress Form Submission pbl_listing_pkg_id Parameter SQL Injection
2012-06-26	83265	Website FAQ Plugin for WordPress wp-admin/admin-ajax.php category Parameter SQL injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.