CVE-2019-19383

freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command this is exploitable even if logging is disabled...

WordPress sell-downloads plugin information disclosure vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sell-downloads is a paid downloadable site builder plugin used in it. A security vulnerability exists in WordPress sell-downloads plug...

CVE-2017-18579

The corner-ad plugin before 1.0.8 for WordPress has XSS...

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

HisiPHP Cross-Site Scripting Vulnerability

HisiPHP is a set of rapid development framework based on ThinkPHP and Layui, which integrates permission management, module management, plugin management and database management. A cross-site scripting vulnerability exists in hisiphp version 1.0.8. The vulnerability stems from the lack of proper...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

Cross site scripting

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

CVE-2019-1010193

hisiphp 1.0.8 is affected by: Cross Site Scripting XSS...

CVE-2019-1010193

Summary: CVE-2019-1010193 affects Hisiphp 1.0.8, a ThinkPHP/Layui-based framework. Vulnerability: Cross-Site Scripting (XSS) due to insufficient validation of client-supplied data in the web application. Root cause: lack of proper input validation in the affected web interface/component. Impact (...

Security update for libu2f-host, pam_u2f (moderate)

openSUSE Security Update: Security update for libu2f-host, pamu2f Announcement ID: openSUSE-SU-2019:1725-1 Rating: moderate References: 1128140 1135727 1135729 Cross-References: CVE-2019-12209 CVE-2019-12210 CVE-2019-9578 Affected Products: openSUSE Leap 15.0 An update that fixes three...

DEBIAN-CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

Design/Logic Flaw

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

JVN#88962935: Multiple vulnerabilities in WordPress Plugin "Zoho SalesIQ"

WordPress Plugin "Zoho SalesIQ" provided by Zoho SalesIQ Team contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2019-5962 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N|...

WordPress ZOHO SalesIQ Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ZOHO SalesIQ is a live chat customer support plugin used in it. A cross-site request forgery vulnerability exists in WordPress ZOHO...

WordPress ZOHO SalesIQ Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ZOHO SalesIQ is a live chat customer support plugin used in it. A cross-site scripting vulnerability exists in WordPress ZOHO SalesIQ...

Cross site scripting

Microweber 1.0.8 has reflected cross-site scripting XSS vulnerabilities...

CVE-2018-19917

CVE-2018-19917 refers to Microweber 1.0.8 with a reflected XSS in the search.php endpoint via the keywords GET parameter. Technical details from the PacketStorm/Netsparker materials show an in-page script injection vector (e.g., keywords parameter) and indicate the advisory rated it high severity...

CVE-2018-19917

Microweber 1.0.8 has reflected cross-site scripting XSS vulnerabilities...

Microweber 1.0.8 Cross-Site Scripting Vulnerability

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber version 1.0.8. A remote attack...