2947 matches found
CVE-2015-2825: Undefined Security Weakness
Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...
CVE-2014-9311
Cross-site scripting XSS vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the locationid parameter in a shareaholicaddlocation action to wp-admin/admin-ajax.php...
CVE-2014-9311
CVE-2014-9311 affects the WordPress Shareaholic plugin prior to version 7.6.1.0. The vulnerability is a cross-site scripting (XSS) flaw in admin.php where authenticated users can inject arbitrary script/HTML via the location[id] parameter in the shareaholic_add_location action to wp-admin/admin-a...
WordPress Plugin MiwoFTP 1.0.5 - Multiple Cross-Site Request Forgery Cross-Site Scripting Vulnerabilities
WordPress Plugin MiwoFTP 1.0.5 - Multiple Cross-Site Request Forgery Cross-Site Scripting Vulnerabilities WordPress MiwoFTP Plugin 1.0.5 Multiple CSRF XSS Vulnerabilities Vendor: Miwisoft LLC Product web page: http://www.miwisoft.com Affected version: 1.0.5 Summary: MiwoFTP is a smart, fast and...
CVE-2014-9311: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the locationid parameter in a shareaholicaddlocation action to wp-admin/admin-ajax.php...
PT-2015-5916
Name of the Vulnerable Software and Affected Versions Simple Ads Manager plugin versions prior to 2.7.97 for WordPress Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in different actions to specific API endpoints, such ...
CVE-2015-2824: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a 1 hits parameter in a samhits action to sam-ajax.php; the 2 cstr parameter in a loadposts action to sam-ajax-admin.php; the 3 searchTe...
CVE-2015-0950
Cross-site scripting XSS vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script or HTML via the substring parameter...
CVE-2015-0950
Cross-site scripting XSS vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script or HTML via the substring parameter...
PT-2015-4989
Name of the Vulnerable Software and Affected Versions X-Cart versions 5.1.6 through 5.1.10 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the substring parameter in the "admin.php" file. Recommendations F...
CVE-2015-0950: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script or HTML via the substring parameter...
WordPress Simple Ads Manager 2.5.94 / 2.5.96 SQL Injection
Vulnerability title: Wordpress plugin Simple Ads Manager - Multiple SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link: https://wordpress.org/plugins/simple-ads-manager/ CV...
Wordpress Simple Ads Manager Plugin - Multiple SQL Injection Vulnerability
Exploit for php platform in category web applications Vulnerability title: Wordpress plugin Simple Ads Manager - SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link:...
CVE-2015-2755
Multiple cross-site request forgery CSRF vulnerabilities in the AB Google Map Travel AB-MAP plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 lat Latitude, 2 long Longitude, 3...
精讯CMS SQL注入（通杀）
简要描述： 底层模型解析出错，导致大面积注入。 这是真的注入，真的能注出数据的。 无视新版添加的webscan.class.php 详细说明： 找注入，上来就看sql语句是怎么处理的。 jxcms的model调用数据库操作无论是 -where -find 都会调用/jxcms/lib/core/db.class.php文件中的checkOneWhere函数进行组装与过滤。 private function checkOneWhere$str $tmp = pregreplace'/"|'.?\1/s', '', $str; $tmp = strtoupper$tmp; if...
CVE-2015-2755: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the AB Google Map Travel AB-MAP plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 lat Latitude, 2 long Longitude, 3...
WordPress Plugin Google Analytics by Yoast 'class-admin.php' HTML Injection Vulnerability
WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. An HTML injection vulnerability exists in the WordPress plugin Google Analytics by Yoast 'class-admin.php'. An attacker can exploit the vulnerability to execute...
PT-2015-5697
Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.0.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated editors to inject arbitrary web script or HTML. This is achieved via the serendipitycatname parameter to the "serendipity...
PT-2015-5698
Name of the Vulnerable Software and Affected Versions WordPress SEO by Yoast plugin versions 1.5.7 and earlier, 1.6.x before 1.6.4, 1.7.x before 1.7.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the order by or order parameter in the "wpseo...
Smart PHP Poll - Authentication Bypass
Exploit Title: Smart PHP Poll Auth Bypass Vulnerability Google Dork: Copyright � Smart PHP Poll. All Rights Reserved. Exploit Author: Mr.tro0oqy from Yemen Email : [email protected] Download Script :http://www.scriptsez.net/download/download.php?action=download&p=smartphppoll.zip&ns=1 go to...