186 matches found
WordPress 301 Redirects - Easy Redirect Manager Plugin < 2.51 SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webfactoryltd:301redirects"; ifdescription...
CVE-2021-24142
Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections...
CVE-2021-24142
The CVE-2021-24142 entry concerns the WordPress plugin 301 Redirects – Easy Redirect Manager. Public sources in the connected documents confirm that versions prior to 2.51 are affected by an SQL injection vulnerability caused by unvalidated input in the Redirect From column during CSV import. The...
CVE-2021-24142 301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection
Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections...
301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection
The plugin does not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections. The PoC video provided mentioned 2.53 as vulnerable, however v2.45 was installed and used. The issue has been verified to have been fixed in 2.51 PoC POST...
[SECURITY] Fedora 33 Update: kernel-5.8.15-301.fc33
The kernel meta package...
GHSA-9Q64-MPXX-87FG Open Redirect in ecstatic
Versions of ecstatic prior to 4.1.2, 3.3.2 or 2.2.2 are vulnerable to Open Redirect. The package fails to validate redirects, allowing attackers to craft requests that result in an HTTP 301 redirect to any other domains. Recommendation If using ecstatic 4.x, upgrade to 4.1.2 or later. If using...
Open Redirect in ecstatic
Versions of ecstatic prior to 4.1.2, 3.3.2 or 2.2.2 are vulnerable to Open Redirect. The package fails to validate redirects, allowing attackers to craft requests that result in an HTTP 301 redirect to any other domains. Recommendation If using ecstatic 4.x, upgrade to 4.1.2 or later. If using...
Mail.ru: CRLF Injection in 301 Redirect allow to Set-Cookies for mail.ru
CRLF injection in HTTP 301 reply on 1l-go.mail.ru...
WordPress 301 Redirects plugin <= 2.40 - Authenticated Arbitrary Redirect Injection, XSS, and CSRF vulnerabilities
Authenticated Arbitrary Redirect Injection, XSS, and CSRF vulnerabilities found by Chloe Chamberland in WordPress 301 Redirects plugin versions = 2.40. Solution Update the WordPress 301 Redirects plugin to the latest available version at least 2.45...
CVE-2019-19915
The CVE-2019-19915 entry concerns the WordPress plugin 301 Redirects - Easy Redirect Manager (pre-2.45). Several connected sources confirm that authenticated users (subscriber or higher) can modify, delete, or inject redirect rules via the admin-ajax actions eps_redirect_save and eps_redirect_del...
301 Redirects - Easy Redirect Manager <= 2.40 - Authenticated Arbitrary Redirect Injection and Modification, XSS, and CSRF
The weaknesses allow for any authenticated user, even subscribers, to modify, delete, and inject redirect rules that could potentially result in a loss of site availability, in addition to XSS and CSRF. PoC...
[SECURITY] Fedora 31 Update: kernel-5.3.7-301.fc31
The kernel meta package...
WordPress Simple 301 Redirects Plugin < 1.25 Multiple Vulnerabilities
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2019-15776
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file...
Crlf injection
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file...
CVE-2019-15776
The CVE-2019-15776 entry concerns the WordPress plugin simple-301-redirects-addon-bulk-uploader before v1.2.5, which lacks protection against 301 redirect rule injection via a CSV file. Connected sources indicate a vulnerability enabling unintended redirects (potentially redirecting site traffic ...
CVE-2019-15776
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file...
WordPress 404-to-301 Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. 404-to-301 is a plugin used to redirect 404 pages to other pages. The WordPress 404-to-301 plugin suffers from a SQL injection...