CVE-2017-5677

PEAR HTMLAJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression...

vivaglammagazine.com XSS vulnerability

Vulnerable URL: http://vivaglammagazine.com/wp-content/plugins/adjax-by-301ads/ad.php?host="-alert'OPENBUGBOUNTY'-" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

WordPress 'wp_ajax_update_plugin' function directory traversal vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the 'wpajaxupdateplugin' function in the wp-admin/includes/ajax-actions.ph...

Directory traversal

Directory traversal vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. dot dot in the plugin parameter to wp-admin/admin-ajax.php, as...

CVE-2016-6897

Cross-site request forgery CSRF vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the checkajaxreferer...

UBUNTU-CVE-2016-6897

Cross-site request forgery CSRF vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the checkajaxreferer...

CVE-2016-6897

CVE-2016-6897 describes a CSRF vulnerability in WordPress up to version 4.5.x affecting the wp_ajax_update_plugin handler in wp-admin/includes/ajax-actions.php. The issue arises from a late check_ajax_referer call, enabling remote attackers to hijack subscribers’ authentication for /dev/random re...

CVE-2016-10148

The CVE-2016-10148 entry concerns WordPress before 4.6. The vulnerable component is wp_ajax_update_plugin in wp-admin/includes/ajax-actions.php. The root cause is that a get_plugin_data call is performed before checking the update_plugins capability, allowing remote authenticated users to bypass ...

CVE-2016-6897

Cross-site request forgery CSRF vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the checkajaxreferer...

CVE-2016-6896

Directory traversal vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. dot dot in the plugin parameter to wp-admin/admin-ajax.php, as...

MetalGenix GeniXCMS SQL Injection Vulnerability (CNVD-2017-00557)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the inc/lib/Control/Ajax/tags-ajax.control.php file in MetalGenix...

CVE-2017-5345

SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...

rn-bank.ru XSS vulnerability

Vulnerable URL: http://rn-bank.ru/ajax/feedbacksubmit.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 499485 VIP website status:| No Check rn-bank.ru SSL connection:| Grade: F Coordinated Disclosure Timeline:...

[SECURITY] Fedora 24 Update: js-jquery-2.2.4-1.fc24

jQuery is a fast, small, and feature-rich JavaScript library. It makes thin gs like HTML document traversal and manipulation, event handling, animation, a nd Ajax much simpler with an easy-to-use API that works across a multitude of browsers. With a combination of versatility and extensibility,...

[SECURITY] Fedora 25 Update: js-jquery1-1.12.4-2.fc25

jQuery is a fast, small, and feature-rich JavaScript library. It makes thin gs like HTML document traversal and manipulation, event handling, animation, a nd Ajax much simpler with an easy-to-use API that works across a multitude of browsers. With a combination of versatility and extensibility,...

WordPress Plugin Simply Poll SQL Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the pollid parameter of the Simply Poll admin-ajax.php page of the...

[SECURITY] Fedora 25 Update: js-jquery-2.2.4-1.fc25

jQuery is a fast, small, and feature-rich JavaScript library. It makes thin gs like HTML document traversal and manipulation, event handling, animation, a nd Ajax much simpler with an easy-to-use API that works across a multitude of browsers. With a combination of versatility and extensibility,...

WordPress Plugin Support Plus Responsive Ticket System SQL Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the catid parameter of the admin-ajax.php page in version 7.1.3 of the...

Wordpress WP Support Plus Responsive Ticket System 7.1.3 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 – WordPress Plugin – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Software Link:...

WordPress Support Plus Responsive Ticket System 7.1.3 SQL Injection

Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 a WordPress Plugin a Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Software Link:...