259 matches found
Cross site request forgery (csrf)
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...
CVE-2018-20971
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...
WordPress Absolutely Glamorous Custom Admin Plugin <= 6.4.1 Database Backup Arbitrary File Download Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112439";...
CVE-2018-11098
An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...
Frog CMS File Upload Vulnerability
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A security vulnerability exists in Frog CMS version 0.9.5. An attacker can exploit the vulnerability wit...
Church Admin < 1.2550 - CSRF
The Church Admin WordPress plugin was affected by a CSRF security vulnerability...
GravCMS Core 1.4.2 Cross Site Scripting
Exploit Title: GravCMS Core Admin Plugin v1.4.2 - Persistent Cross-Site Scripting Date: 2017-06-07 Exploit Author: Ahsan Tahir Vendor Homepage: https://getgrav.org/ Software Link: https://getgrav.org/download/core/grav-admin/1.2.4 Version: 1.4.2 Tested on: Kali Linux 2.0 | Windows 8.1 Email:...
Piwigo Remote File Inclusion Vulnerability (CNVD-2017-00112)
Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A security vulnerability exists in the admin/plugin.php file in Piwigo 2.8.3 and earlier versions, which stems from the...
Piwigo Cross-Site Scripting Vulnerability (CNVD-2017-00119)
Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A cross-site scripting vulnerability exists in the admin/plugin.php file in Piwigo 2.8.3 and prior versions. A remote...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in a certain error case...
emlog 5.1.2 admin/plugin.php 存在本地文件包含漏洞
No description provided by source...
Cross site scripting
Cross-site scripting XSS vulnerability in the churchadmin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/churchadmin-registration-form/...
WordPress Church Admin Plugin <= 0.33.4.5 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in includes/validate.php id parameter. Solution Update the plugin...
Mani's Admin Plugin Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34685/info Mani's Admin Plugin is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users. alias aspam...
CVE-2012-4989
OpenX 2.8.10 and earlier versions are vulnerable to a Cross‑Site Scripting (XSS) in admin/plugin-index.php via the parent parameter in the info action (CVE-2012-4989). The root cause is unsanitized input returned to the administrator’s browser. Vendor fixed it in SVN revision 81823 (solution file...
Counter Strike Source ManiAdminPlugin Remote Crash
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@ Counter strike source @@@@@ @@@@@ Mani Admin Plugin Exploit v2 @@@@@ @@@@@ M4rt1n. www.hackerzbay.com @@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ alias aspam "admin;admin;admin;admin;admin;admin;admin;timeleft;timeleft;timeleft" alias...
Manis Admin Plugin - Remote Denial of Service
Manis Admin Plugin - Remote Denial of Service source: https://www.securityfocus.com/bid/34685/info Mani's Admin Plugin is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users. alias...
Counter Strike Source ManiAdminPlugin v2 Remote Crash Exploit
Exploit for unknown platform in category dos / poc ============================================================= Counter Strike Source ManiAdminPlugin v2 Remote Crash Exploit ============================================================= @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@ Counter...