Unrestricted file upload

Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-content/uploads/gravityforms...

CVE-2014-4972

Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-content/uploads/gravityforms...

CVE-2014-4972

Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-content/uploads/gravityforms...

CVE-2014-4972

CVE-2014-4972 concerns the WordPress Gravity Upload Ajax plugin, affected through version 1.1 and earlier. The vulnerability is an unrestricted/arbitrary file upload in the plugin, allowing a remote attacker to upload a file with an executable extension and then access it via a direct request to ...

WordPress Admin Menu Tree Page View 2.6.9 CSRF / Privilege Escalation

Exploit Title: Admin Menu Tree Page View CSRF, Privilege Escalation Discovery Date: 2017-12-12 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://eskapism.se/ Software Link: https://wordpress.org/plugins/admin-menu-tree-page-view Version: 2.6.9...

WordPress Social Media Widget By Acurax 3.2.5 Cross Site Request Forgery

Exploit Title: Social Media Widget by Acurax CSRF Discovery Date: 2017-12-12 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://www.acurax.com/ Software Link: https://wordpress.org/plugins/acurax-social-media-widget Version: 3.2.5 Tested on:...

WordPress CMS Tree Page View 1.4 CSRF / Privilege Escalation

Exploit Title: CMS Tree Page View CSRF, Privilege Escalation Discovery Date: 2017-12-12 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://eskapism.se/ Software Link: https://wordpress.org/plugins/cms-tree-page-view Version: 1.4 Tested on:...

WordPress Genie Affiliate Ads for Clickbank Products Plugin Cross-Site Scripting Vulnerability

MyCBGenie Affiliate Ads for Clickbank Products plugin is one of the advertisement plugins that are used in WordPress, a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers. MyCBGenie...

Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01395)

Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the LastName parameter in the index.php?user=ajax request...

CVE-2017-18011

The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the textadsajax.php bordercolor parameter...

Chatting System PHP Ajax MySQL JavaScript 1.0 Cross Site Scripting

Exploit Title: Chatting System PHP Ajax MySQL JavaScript - xss Google Dork: N/A Date: 2017/31/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://www.codester.com/IngeniousDeveloper Software Buy:...

CVE-2017-17995

Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...

CVE-2017-17995

Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...

CVE-2017-17995

Biometric Shift Employee Management System is affected by a stored/reflected XSS via the Last_Name parameter in the index.php?user=ajax request. The issue, reported across multiple sources (NVD/CNVD/CVELIST, etc.), is caused by improper sanitization of user-supplied input leading to script inject...

Joomla SP Movie Database 1.4 SQL Injection

Exploit Title: SP Movie Database - SQL Injection Vulnerability Google Dork: inurl:option=comspmoviedb Date: 29.12.2017 Author: pwny Source Component : https://extensions.joomla.org/extension/sp-movie-database/ Version : 1.4 Tested on: Kali Linux proof : https://ibb.co/cjdiZw Search Form in Home...

Easy!Appointments 1.2.1 - Cross-Site Scripting

Easy!Appointments 1.2.1 - Cross-Site Scripting Easy!Appointments v1.2.1 Multiple Stored XSS Vulnerabilities Vendor: Alex Tselegidis Product web page: http://www.easyappointments.org Affected version: 1.2.1 Summary: Easy!Appointments is a highly customizable web application that allows your...

PHP Scripts Mall Groupon Clone Script SQL Injection Vulnerability

PHP Scripts Mall Groupon Clone Script is a set of PHP based trade management scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Groupon Clone Script version 3.01. A remote attacker can exploit the vulnerability by sending the 'stateid' parameter to the...

Elementor Page Builder <= 1.7.12 - Authenticated Unrestricted Editing

Many AJAX actions are unsecured, allowing logged in users unrestricted access to the internal Elementor functions...

CVE-2017-16870

The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraftajaxhandler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary...

Ed: Chrome Extension is vulnerable to the self-DOS issues in case it process the security.txt with a big size

Description Hello. Before all, thanks for the invite: Here is keyword: frog I discovered the self-DOS issue, which affects Chrome extension. Impact I marked the impact as low, because it will affect only the browser tab, and will not impact other browser tabs. The issue happens due to processing...