CVE-2017-20102

CVE-2017-20102 affects Album Lock 4.0. The vulnerability is a path traversal in the /getImage functionality caused by manipulating the parameter named filePaht . Local attacker access is required. Public disclosure of the exploit is noted in the sources. The records do not provide details on affe...

CVE-2017-20102 Album Lock getImage path traversal

A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public a...

CVE-2017-20102 Album Lock getImage path traversal

A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public a...

CVE-2017-20101

CVE-2017-20101 affects ProjectSend r754. A vulnerability in the file/process: process.php?do=zip_download allows manipulation of the argument client/file, leading to information disclosure. The flaw is exploitable remotely. Connected documents confirm the impact as an information disclosure vulne...

CVE-2017-20101 ProjectSend information disclosure

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...

CVE-2017-20101 ProjectSend information disclosure

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...

CVE-2017-20100 Air Transfer cross site scripting

A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20100

CVE-2017-20100 pertains to the Air Transfer applications (versions 1.0.14/1.2.1). The issue is a cross-site scripting (XSS) vulnerability caused by an insecure handling/validation of the path parameter in the list/download modules, enabling client-side code execution. The vulnerability is describ...

CVE-2017-20100 Air Transfer cross site scripting

A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

travelepisodes.com Cross Site Scripting vulnerability OBB-2687187

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2017-20093

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

CVE-2017-20097

The CVE-2017-20097 entry concerns WP-Filebase Download Manager Plugin version 3.4.4. All available connected records describe a cross-site scripting vulnerability in this plugin, with remote exploitation being possible. The root cause/affected component is unspecified in some sources, but the pat...

CVE-2017-20097 WP-Filebase Download Manager Plugin cross site scriting

A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely...

CVE-2017-20096

WP-SpamFree Anti-Spam Plugin for WordPress (version 2.1.1.4) contains a cross-site scripting (XSS) vulnerability described as affecting an unknown part of the plugin. The issue permits remote initiation of an XSS attack. The connected documents consistently identify it as a basic XSS vulnerabilit...

CVE-2017-20095

CVE-2017-20095 affects the WordPress plugin Simple Ads Manager . The connected sources describe a remote, network-exploitable vulnerability that leads to code injection due to manipulation of unknown code. Public documentation labels it as critical/high impact (e.g., NVD CVSS v3.1 base score 9.8,...

CVE-2017-20095 Simple Ads Manager Plugin code injection

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...

CVE-2017-20094 NewStatPress Plugin Persistent cross site scriting

A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation leads to basic cross site scripting Persistent. The attack may be initiated remotely. Upgrading to version 1.2.5 is able to address this...

CVE-2017-20094

CVE-2017-20094 affects the WordPress plugin NewStatPress 1.2.4. The vulnerability is described as a basic persistent cross-site scripting (XSS) issue that can be exploited remotely. Upgrading to version 1.2.5 addresses the issue. Some connected sources also indicate that a PoC exists (Exploitatio...

CVE-2017-20093 Download Manager Plugin cross-site request forgery

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

CVE-2017-20093 Download Manager Plugin cross-site request forgery

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...