CVE-2020-12104

CVE-2020-12104 affects the WordPress wp-advanced-search plugin (v3.3.6). The Import feature accepts uploaded .sql files and is vulnerable to authenticated SQL injection, enabling execution of arbitrary SQL commands without validation. Root cause and impact are as described in the connected Red Ha...

PT-2020-13036 · WordPress · Wp-Advanced-Search

Name of the Vulnerable Software and Affected Versions: wp-advanced-search plugin version 3.3.6 Description: The Import feature in the wp-advanced-search plugin is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any...

WP-Advanced-Search < 3.3.7 - Authenticated SQL Injection

The import functionality to restore plugin settings within the admin pages was vulnerable to SQL Injection through a privileged user with the editposts capability...

WordPress WP-Advanced-Search plugin <= 3.3.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by Florian Hauser in WordPress WP-Advanced-Search plugin versions = 3.3.3. Solution Update the WordPress WP-Advanced-Search plugin to the latest available version at least 3.3.7...

Download Manager <= 2.9.93 - Authenticated Cross-Site Scripting (XSS)

In the pro features of the WordPress download manager plugin, there is a Category Short-code feature witch can use to sort categories with order by a function which will be used as ?orderby=title,publishdate . By adding parameter " and add any XSS payload , the xss payload will execute. To...

WordPress Download Manager 2.9.93 Cross Site Scripting

Exploit Title: WordPress Download Manager Cross-site Scripting Discovery Date: 2019-04-13 Exploit Author: ThuraMoeMyint Author Link: https://twitter.com/mgthuramoemyint Vendor Homepage: https://www.wpdownloadmanager.com Software Link: https://wordpress.org/plugins/download-manager Version: 2.9.93...

X (Formerly Twitter): Protected tweets exposure through the URL

Summary Leaking sensitive information from protected tweets via a prepared website. This vulnerability could lead to exposure of information such as credit card numbers, bank account numbers, phone numbers, tokens, specific words or even the whole phrases but also the exposure of any additional...

guideshirts.com XSS vulnerability

Open Bug Bounty ID: OBB-699751 Description| Value ---|--- Affected Website:| guideshirts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shop.comar.cz XSS vulnerability

Open Bug Bounty ID: OBB-696499 Description| Value ---|--- Affected Website:| shop.comar.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Docker-Inurlbr - Advanced Search In Search Engines, Enables Analysis Provided To Exploit GET / POST Capturing Emails & Urls

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. How to build git clone https://github.com/gmdutra/docker-inurlbr.git cd docker-inurlbr docker build -t gmdutra/inurl...

revell-china.com XSS vulnerability

Open Bug Bounty ID: OBB-691985 Description| Value ---|--- Affected Website:| revell-china.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

laserparts.ru XSS vulnerability

Open Bug Bounty ID: OBB-690853 Description| Value ---|--- Affected Website:| laserparts.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cuisinepro.fr XSS vulnerability

Open Bug Bounty ID: OBB-689836 Description| Value ---|--- Affected Website:| cuisinepro.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

century-soft.com XSS vulnerability

Open Bug Bounty ID: OBB-683732 Description| Value ---|--- Affected Website:| century-soft.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

korrosionsschutzshop.de XSS vulnerability

Open Bug Bounty ID: OBB-678707 Description| Value ---|--- Affected Website:| korrosionsschutzshop.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

naprawaglosnikow.pl XSS vulnerability

Open Bug Bounty ID: OBB-677367 Description| Value ---|--- Affected Website:| naprawaglosnikow.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

betexa.cz XSS vulnerability

Open Bug Bounty ID: OBB-677154 Description| Value ---|--- Affected Website:| betexa.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kasandra.com.pl XSS vulnerability

Open Bug Bounty ID: OBB-676678 Description| Value ---|--- Affected Website:| kasandra.com.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

beethovenandcompany.com XSS vulnerability

Open Bug Bounty ID: OBB-675661 Description| Value ---|--- Affected Website:| beethovenandcompany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

johnsoninteriors.com XSS vulnerability

Open Bug Bounty ID: OBB-674604 Description| Value ---|--- Affected Website:| johnsoninteriors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...