Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 2:54 a.m.4 views

CVE-2018-1000133

Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to...

7.5CVSS7AI score0.00545EPSS
Exploits0References1
NVD
NVD
added 2018/03/16 2:29 p.m.8 views

CVE-2018-1000133

Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to...

7.5CVSS7.6AI score0.00545EPSS
Exploits0References5
OSV
OSV
added 2018/03/16 2:29 p.m.10 views

CVE-2018-1000133

Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A standard unprivileged user could gain system administrator permissions within the web portal.. This attack appear to be exploitable via The user must be able to...

7.5CVSS7.8AI score
Exploits0References5
CVE
CVE
added 2018/03/16 2:4 p.m.38 views

CVE-2018-1000133

Pitchfork v1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that lets a logged-in, unprivileged user elevate to System Administrator within the web portal. Root cause: incorrect permission handling that permits self-assigning System Administrator r...

7.5CVSS7.6AI score0.00545EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2017/11/03 6:0 p.m.51 views

CVE-2017-1000133

Mahara versions affected: 15.04 before 15.04.8, 15.10 before 15.10.4, and 16.04 before 16.04.2. The vulnerability allows an attacker to cause another user’s artefacts to be included in the attacker’s Leap2a export, effectively enabling exposure of another user’s artefacts. Some connected sources ...

7.5CVSS7.4AI score0.00251EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2016/10/10 8:59 p.m.7 views

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

6.1CVSS6AI score0.02995EPSS
Exploits1References3
OSV
OSV
added 2016/10/10 8:59 p.m.1 views

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

6.1CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2016/10/10 8:0 p.m.10 views

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

6AI score0.02995EPSS
Exploits1References3
CVE
CVE
added 2016/10/10 8:0 p.m.68 views

CVE-2016-1000133

The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...

6.1CVSS5.9AI score0.02995EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder