47 matches found
CVE-2023-7168
CVE-2023-7168 affects the WordPress plugin Better Follow Button for Jetpack (
CVE-2024-7168
creationtimestamp| type| source ---|---|--- 2024-07-28 21:53:35+00:00| seen| https://t.me/cvedetector/1782...
CVE-2024-7168 SourceCodester School Fees Payment System manage_user.php sql injection
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2024-7168 SourceCodester School Fees Payment System manage_user.php sql injection
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit...
WordPress Better Follow Button for Jetpack Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)
Software Better Follow Button for Jetpack Type Plugin Vulnerable versions = 8.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7168 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 6542498b83c5 Credits Bob Matyas...
CVE-2020-7168
CVE-2020-7168 is a remote code execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07). The issue arises from a flaw in the selectUserGroup.xhtml endpoint, where the beanName parameter is improperly validated, allowing an attacker to in...
CVE-2019-7168
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog...
CVE-2019-7168
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog...
CVE-2019-7168
CVE-2019-7168 is a stored-self XSS in Croogo CMS prior to or at version 3.0.5, enabling an attacker to execute HTML or JavaScript via the Blog field at /admin/nodes/nodes/add/blog. The Red Hat/EUVD/OSV entries and GitHub advisories corroborate a Croogo-based XSS issue with Croogo 3.0.5. The avail...
CVE-2013-7168
CVE-2013-7168 is rejected/not used; the entry does not represent an active vulnerability.
CVE-2016-7168
Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...
CVE-2016-7168
Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...
CVE-2016-7168
Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...
CVE-2016-7168
WordPress before 4.6.1 is affected by CVE-2016-7168 due to a Cross-site scripting (XSS) vulnerability in media_handle_upload (wp-admin/includes/media.php). An attacker could trick an administrator into uploading an image with a crafted filename, enabling injection of arbitrary script/HTML when th...
CVE-2016-7168
Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...
[ASA-201609-32] wordpress: multiple issues
Arch Linux Security Advisory ASA-201609-32 ========================================== Severity: High Date : 2016-09-30 CVE-ID : CVE-2016-7168 CVE-2016-7169 Package : wordpress Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package wordpress...
[SECURITY] [DSA 3681-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3681-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 29, 2016 https://www.debian.org/security/faq -...
Debian DLA-633-1 : wordpress security update
Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2015-8834: Cross-site scripting XSS vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject...
[SECURITY] [DLA 633-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb7u12 CVE ID : CVE-2015-8834 CVE-2016-4029 CVE-2016-5836 CVE-2016-6634 CVE-2016-6635 CVE-2016-7168 CVE-2016-7169 Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the...