1478 matches found
CVE-2023-1404
The Weaver Show Posts Plugin for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up to, and including, 1.6. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitra...
CVE-2023-30149
SQL injection vulnerability in the City Autocomplete cityautocomplete module from ebewe.net for PrestaShop, prior to version 1.8.12 for PrestaShop version 1.5/1.6 or prior to 2.0.3 for PrestaShop version 1.7, allows remote attackers to execute arbitrary SQL commands via the type, inputname. or q...
CVE-2022-4495
A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/browser/column.py. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2022-39182
H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may allow a malicious actor to gain system privileges...
CVE-2022-37112
BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...
CVE-2022-28480
ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe...
CVE-2022-27962
Bluecms 1.6 has a SQL injection vulnerability at cooike...
CVE-2020-24271
A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username==...
CVE-2020-23983
Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags...
CVE-2020-19853
BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...
CVE-2019-1010191
marginalia 1.6 is affected by: SQL Injection. The impact is: The impact is a injection of any SQL queries when a user controller argument is added as a component. The component is: Affects users that add a component that is user controller, for instance a parameter or a header. The attack vector...
CVE-2019-10262
A SQL Injection issue was discovered in BlueCMS 1.6. The variable $adid is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes...
CVE-2018-11424
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425...
CVE-2011-4095
Jara 1.6 has an XSS vulnerability...
CVE-2011-4919
mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...
CVE-2011-4094
Jara 1.6 has a SQL injection vulnerability...
CVE-2010-4897
SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action...
CVE-2025-47675
CVE-2025-47675 refers to a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Woobox . The issue is described as an improper neutralization of input during web page generation, enabling DOM-based XSS. Affected versions are stated as n/a through 1.6 ; exploitation status and conc...
CVE-2025-47662 WordPress Woobox <= 1.6 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woobox Woobox allows Stored XSS. This issue affects Woobox: from n/a through 1.6...