Lucene search
+L

7707 matches found

Exploit DB
Exploit DB
added 2012/05/15 12:00 a.m.28 views

WordPress Plugin NewsLetter Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53523/info Newsletter Manager plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues ...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/15 12:00 a.m.26 views

WordPress Plugin PDF & Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53519/info PDF & Print Button Joliprint plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/15 12:00 a.m.18 views

WordPress Plugin Share and Follow 1.80.3 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53533/info The Share and Follow plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

4.3CVSS5.2AI score0.03731EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2012/05/15 12:00 a.m.33 views

WordPress Plugin Track That Stat 1.0.8 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/53551/info The Track That Stat plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2012/05/15 12:00 a.m.18 views

WordPress Plugin LeagueManager 3.7 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin LeagueManager 3.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53525/info LeagueManager plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

6.9AI score
SaveExploits0
exploitpack
exploitpack
added 2012/05/15 12:00 a.m.13 views

WordPress Plugin PDF Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin PDF Print Button Joliprint 1.3.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53519/info PDF & Print Button Joliprint plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

6.9AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/15 12:00 a.m.23 views

WordPress Plugin iFrame Admin Pages 0.1 - 'main_page.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53522/info The iFrame Admin Pages plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/13 12:00 a.m.34 views

WordPress Plugin WP-FaceThumb 0.1 - 'pagination_wp_facethum' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53497/info WP-FaceThumb is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

4.3CVSS5.2AI score0.12848EPSS
SaveExploits2
exploitpack
exploitpack
added 2012/05/13 12:00 a.m.18 views

WordPress Plugin WP-FaceThumb 0.1 - pagination_wp_facethum Cross-Site Scripting

WordPress Plugin WP-FaceThumb 0.1 - paginationwpfacethum Cross-Site Scripting source: https://www.securityfocus.com/bid/53497/info WP-FaceThumb is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

6.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/10 12:00 a.m.32 views

Chevereto 1.91 - '/Upload/engine.php?v' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53448/info Chevereto Image Upload Script is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker m...

4.3CVSS5.2AI score0.01623EPSS
SaveExploits2
exploitpack
exploitpack
added 2012/05/09 12:00 a.m.24 views

PivotX 2.3.2 - ajaxhelper.php Cross-Site Scripting

PivotX 2.3.2 - ajaxhelper.php Cross-Site Scripting source: https://www.securityfocus.com/bid/53434/info PivotX is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/09 12:00 a.m.36 views

PivotX 2.3.2 - 'ajaxhelper.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53434/info PivotX is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

4.3CVSS5.2AI score0.03262EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2012/05/08 12:00 a.m.27 views

Linksys WRT54GL Wireless Router - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53427/info The Linksys WRT54GL router is prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service conditions, or inject...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2012/05/08 12:00 a.m.20 views

Linksys WRT54GL Wireless Router - Cross-Site Request Forgery

Linksys WRT54GL Wireless Router - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/53427/info The Linksys WRT54GL router is prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change...

0.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/05/08 12:00 a.m.27 views

iGuard Security Access Control Cross Site Scripting Vulnerability

iGuard Security Access Control is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input in the embedded web server. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

7.1AI score
SaveExploits0References1
Exploit DB
Exploit DB
added 2012/05/07 12:00 a.m.29 views

Ramui Forum Script - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53411/info Ramui Forum Script is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

4.3CVSS5.2AI score0.01623EPSS
SaveExploits2
exploitpack
exploitpack
added 2012/05/02 12:00 a.m.18 views

iGuard Security Access Control Device Firmware 3.6.7427A - Cross-Site Scripting

iGuard Security Access Control Device Firmware 3.6.7427A - Cross-Site Scripting source: https://www.securityfocus.com/bid/53355/info iGuard Security Access Control is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input in the embedded web server...

0.6AI score
SaveExploits0
Patchstack
Patchstack
added 2012/05/01 12:00 a.m.11 views

WordPress Zingiri Web Shop Plugin <= 2.4.2 - Persistent XSS

WordPress Zingiri Web Shop plugin is prone to persistent cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

3.3AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
added 2012/04/27 12:00 a.m.24 views

MySQLDumper 1.24.4 - main.php Multiple Cross-Site Request Forgery Vulnerabilities

MySQLDumper 1.24.4 - main.php Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities. 2. A local file-include vulnerability. 3...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/04/27 12:00 a.m.26 views

MySQLDumper 1.24.4 - 'install.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities. 2. A local file-include vulnerability. 3. Multiple cross-site request-forgery vulnerabilities. 4. Multiple...

4.3CVSS5.2AI score0.01866EPSS
SaveExploits5
Rows per page
Query Builder