1341 matches found
Sql injection
SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...
Directory traversal
Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to ajax.php...
vortexmag.net XSS vulnerability
Open Bug Bounty ID: OBB-280206 Description| Value ---|--- Affected Website:| vortexmag.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mylefkada.gr XSS vulnerability
Open Bug Bounty ID: OBB-280205 Description| Value ---|--- Affected Website:| mylefkada.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
anorthosis24.net XSS vulnerability
Open Bug Bounty ID: OBB-280204 Description| Value ---|--- Affected Website:| anorthosis24.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
linuxundich.de XSS vulnerability
Open Bug Bounty ID: OBB-280170 Description| Value ---|--- Affected Website:| linuxundich.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
liman.az XSS vulnerability
Vulnerable URL: http://www.liman.az/wp-admin/admin-ajax.php?tdthemename=Newspaper=7.8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 281602 VIP website status:| No Check liman.az S...
ivoirmixdj.com XSS vulnerability
Vulnerable URL: https://ivoirmixdj.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=7.2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 180640 VIP website status:| No Check...
fashionghana.com XSS vulnerability
Vulnerable URL: https://www.fashionghana.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 468765 VIP website status:| No Coordinated Disclosure Timeline:...
olisa.tv XSS vulnerability
Vulnerable URL: https://www.olisa.tv/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 104768 VIP website status:| No Coordinated Disclosure Timeline: Description|...
yavmode.ru XSS vulnerability
Open Bug Bounty ID: OBB-279801 Description| Value ---|--- Affected Website:| yavmode.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
talkchelsea.net XSS vulnerability
Open Bug Bounty ID: OBB-279752 Description| Value ---|--- Affected Website:| talkchelsea.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
posizionamento-seo.com XSS vulnerability
Open Bug Bounty ID: OBB-279744 Description| Value ---|--- Affected Website:| posizionamento-seo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tomatoheart.com XSS vulnerability
Open Bug Bounty ID: OBB-279735 Description| Value ---|--- Affected Website:| tomatoheart.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tvguru.cz XSS vulnerability
Vulnerable URL: http://www.tvguru.cz/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 233179 VIP website status:| No Coordinated Disclosure Timeline: Description|...
fokus.mk XSS vulnerability
Open Bug Bounty ID: OBB-278814 Description| Value ---|--- Affected Website:| fokus.mk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
elcaribe.com.do XSS vulnerability
Open Bug Bounty ID: OBB-278813 Description| Value ---|--- Affected Website:| elcaribe.com.do Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Sql injection
The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...
CVE-2017-12199
The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...
