EUVD-2022-43911

Malicious code in bioql PyPI...

CVE-2018-17207

An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files installer.php and installer-backup.php, an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution...

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2019-17207

creationtimestamp| type| source ---|---|--- 2024-01-17 09:41:49+00:00| seen| https://t.me/ctinow/169176...

CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

CVE-2019-17207

The CVE concerns the WordPress Broken Link Checker plugin (version 1.11.8) where the vulnerability resides in includes/admin/table-printer.php. A reflected cross-site scripting (XSS) flaw is triggered via the s_filter parameter in the admin tools page (wp-admin/tools.php?page=view-broken-links), ...

WordPress Broken Link Checker 1.11.8 Cross Site Scripting

Document Title =============== Reflected XSS via Broken Link Checker v.1.11.8 WordPress plugin. Product Description =============== Broken Link Checker will monitor your blog looking for broken links and let you know if any are found. Homepage: https://managewp.com/ WordPress Plugin:...

CVE-2017-17207

...

CVE-2017-17207

CVE-2017-17207 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-17207

creationtimestamp| type| source ---|---|--- 2018-12-11 18:12:09+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/php/wpduplicatorcodeinject.rb 2018-12-12 15:33:01+00:00| published-proof-of-concept| https://t.me/defconnews/257 2025-02-06 03:13:43+00:00...

CVE-2018-17207

The CVE concerns WordPress Snap Creek Duplicator plugin before 1.2.42. The issue arises when leftover installer files (installer.php and installer-backup.php) are accessed, allowing an attacker to inject PHP code into wp-config.php during the database setup step, resulting in arbitrary code execu...