CVE-2015-9340

The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

CVE-2015-9339: Unrestricted Upload of File with Dangerous Type

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

PT-2019-7299

Name of the Vulnerable Software and Affected Versions wp-file-upload plugin versions prior to 3.0.0 Description The issue is related to insufficient restrictions on file uploads, specifically affecting php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files. Recommendations For...

PT-2019-7298

Name of the Vulnerable Software and Affected Versions wp-file-upload plugin versions prior to 2.7.1 Description The issue is related to insufficient restrictions on the upload of .js files. Recommendations For versions prior to 2.7.1, update to version 2.7.1 or later to resolve the issue...

HTTP/2 DoS

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, nginx servers, network programming tools like Netty, Envoy, SwiftNIO, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a maliciou...

WordPress js-jobs plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. js-jobs is a recruitment/job search plugin used in it. WordPress js-jobs plugin has a cross-site request forgery vulnerability. Th...

CVE-2018-20974

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

Cross site request forgery (csrf)

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

CVE-2018-20974

CVE-2018-20974 affects the WordPress plugin js-jobs (JS Job Manager) prior to version 1.0.7. The root cause is CSRF due to insufficient verification of trusted-user requests, enabling forgery of cross-site actions. Impact details are limited to what is stated in the sources (CSRF with potential f...

CVE-2018-20974

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

CVE-2018-20974: Cross-Site Request Forgery (CSRF)

The js-jobs plugin before 1.0.7 for WordPress has CSRF...

PT-2019-10411

Name of the Vulnerable Software and Affected Versions WordPress js-jobs plugin versions prior to 1.0.7 Description The issue affects the js-jobs plugin for WordPress, allowing for CSRF attacks. Recommendations For versions prior to 1.0.7, update the js-jobs plugin to version 1.0.7 or later to...

Joomla! Component JS Jobs (com_jsjobs) 1.2.5 - customfields.php SQL Injection

Joomla! Component JS Jobs comjsjobs 1.2.5 - customfields.php SQL Injection Exploit Title: Joomla! component comjsjobs - 'customfields.php' SQL Injection Dork: inurl:"index.php?option=comjsjobs" Date: 13.08.19 Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link:...

Joomla! Component JS Jobs (com_jsjobs) 1.2.5 - 'customfields.php' SQL Injection

Exploit Title: Joomla! component comjsjobs - 'customfields.php' SQL Injection Dork: inurl:"index.php?option=comjsjobs" Date: 13.08.19 Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link: https://www.joomsky.com/5/download/1 Version: 1.2.5 Tested on: Debian/nginx/jooml...

DEBIAN-CVE-2019-14939

An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default...

Joomla JS Support Ticket Component (com_jssupportticket) 1.1.6 - ticket.php Arbitrary File Deletion

Exploit for php platform in category web applications Exploit Title: Joomla! component comjssupportticket - Authenticated Arbitrary File Deletion Dork: inurl:"index.php?option=comjssupportticket" Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link:...

Joomla! Component JS Jobs (com_jsjobs) 1.2.5 - cities.php SQL Injection

Joomla! Component JS Jobs comjsjobs 1.2.5 - cities.php SQL Injection Exploit Title: Joomla! component comjsjobs - SQL Injection Dork: inurl:"index.php?option=comjsjobs" Date: 11.08.19 Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link:...

Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 - ticket.php Arbitrary File Deletion

Joomla! Component JS Support Ticket comjssupportticket 1.1.6 - ticket.php Arbitrary File Deletion Exploit Title: Joomla! component comjssupportticket - Authenticated Arbitrary File Deletion Dork: inurl:"index.php?option=comjssupportticket" Date: 10.08.19 Exploit Author: qw3rTyTy Vendor Homepage:...