CVE-2019-16780

creationtimestamp| type| source ---|---|--- 2024-03-17 11:16:40+00:00| seen| https://t.me/ctinow/209867...

CVE-2020-16780

CVE-2020-16780 entry is rejected/not used and does not represent an active vulnerability.

[SECURITY] [DSA 4599-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4599-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 08, 2020 https://www.debian.org/security/faq -...

CVE-2019-16780

WordPress users with lower privileges like contributors can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an admin opens the post in the editor. Execution of this attack does require an authenticated user. This...

CVE-2019-16780

CVE-2019-16780 affects WordPress. Lower-privileged users (e.g., contributors) can inject JavaScript into the block editor via a specific payload, which is executed within the WordPress dashboard and can cause XSS if an admin opens the post in the editor. The attack requires an authenticated user....

CVE-2019-16780

WordPress users with lower privileges like contributors can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an admin opens the post in the editor. Execution of this attack does require an authenticated user. This...

MyBB 1.8.13 - Remote Code Execution

Exploit Title: RCE in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16780 This RCE can be executed via CSRF but doesn't require it in some special cases. The...

MyBB 1.8.13 - Remote Code Execution

MyBB 1.8.13 - Remote Code Execution Exploit Title: RCE in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16780 This RCE can be executed via CSRF but doesn't require...

CVE-2017-16780

creationtimestamp| type| source ---|---|--- 2017-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43136...

CVE-2017-16780

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file...

CVE-2017-16780

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file...

CVE-2017-16780

MyBB 1.8.x is affected by CVE-2017-16780: the installer before 1.8.13 allows an unauthenticated remote attacker to write to the configuration file, enabling remote code execution. The root cause is improper handling during installation that permits arbitrary code execution via the config file. Im...