Hi Folks,<\/p>\n
I am using The Events Calendar (the free version with this client) for one of my clients — PBMLawyers.com<\/p>\n
I received a warning message from SiteLock and while I am no expert, it seems that it is referencing The Events Calendar as the source–see below …<\/p>\n
Do you have any thoughts? I’d like your opinion on this.<\/p>\n
Thanks!<\/p>\n
Bill<\/p>\n
Using the GET HTTP method, SiteLock found that :
\n+ The following resources may be vulnerable to blind SQL injection :
\n+ The ‘wpcss_action’ parameter of the \/ CGI :
\n\/?p=94&s=&wpcss_action=show_csszz94&s=&wpcss_action=show_cssyy
\n——– output ——–
\nHTTP\/1.1 200 OK
\n——– vs ——–
\nHTTP\/1.1 301 Moved Permanently
\n————————
\n+ The ‘tribe_paged’ parameter of the \/events\/list\/ CGI :
\n\/events\/list\/?tribe_event_display=past&tribe_paged=1zzpast&tribe_paged=1
\nyy
\n——– output ——–
\n<\/script><script type=’text\/javascript’>
\n\/* <![CDATA[ *\/
\nvar TribeList = {“ajaxurl”:”http:\\\/\\\/pbmlawyers.com\\\/wp-admin\\\/admin-aja
\nx.php”,”tribe_paged”:”1″};
\n\/* ]]> *\/
\n<\/script>
\n——– vs ——–
\n<\/script><script type=’text\/javascript’>
\n\/* <![CDATA[ *\/
\nvar TribeList = {“ajaxurl”:”http:\\\/\\\/pbmlawyers.com\\\/wp-admin\\\/admin-aja
\nx.php”,”tribe_paged”:”1yy”};
\n\/* ]]> *\/
\n<\/script>
\n————————
\n+ The ‘action’ parameter of the \/wp-login.php CGI :
\n\/wp-login.php?rememberme=forever&wp-submit=Log%20In&testcookie=1&log=&pw
\nd=&redirect_to=http%3a%2f%2fpbmlawyers.com%2fwp-admin%2f&action=lostpass
\nwordzzforever&wp-submit=Log%20In&testcookie=1&log=&pwd=&redirect_to=http
\n%3a%2f%2fpbmlawyers.com%2fwp-admin%2f&action=lostpasswordyy
\n——– output ——–
\n\t<head>
\n\t<meta http-equiv=”Content-Type” content=”text\/html; charset=UTF-8″ \/>
\n\t<title>PBM Lawyers \u2013 716.204.1055 \u203a Lost Password<\/title>
\n\t<link rel=’stylesheet’ id=’buttons-css’ href=’http:\/\/pbmlawyers. […]
\n<link rel=’stylesheet’ id=’open-sans-css’ href=’https:\/\/fonts.goo […]
\n——– vs ——–
\n\t<head>
\n\t<meta http-equiv=”Content-Type” content=”text\/html; charset=UTF-8″ \/>
\n\t<title>PBM Lawyers \u2013 716.204.1055 \u203a Log In<\/title>
\n\t<link rel=’stylesheet’ id=’buttons-css’ href=’http:\/\/pbmlawyers. […]
\n<link rel=’stylesheet’ id=’open-sans-css’ href=’https:\/\/fonts.goo […]
\n————————<\/p>\n","protected":false},"template":"","class_list":["post-1078327","topic","type-topic","status-closed","hentry"],"yoast_head":"\n