4924 matches found
WordPress Contact Form 7 International SMS Integration 1.2 XSS
| | Exploit Title: Wordpress Contact Form 7 International Sms Integration Plugin Cross Site Scripting | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://wordpress.org/plugins/cf7-international-sms-integration/ | Software Link:...
WordPress Contact Form 7 International SMS Integration 1.2 XSS Vulnerability
WordPress Contact Form 7 International SMS Integration plugin version 1.2 suffers from a cross site scripting vulnerability. | Exploit Title: Wordpress Contact Form 7 International Sms Integration Plugin Cross Site Scripting | Exploit Author: Ashiyane Digital security Team | Vendor Homepage :...
WordPress Advanced Contact form 7 DB Plugin <= 1.1.0 - Authenticated Information Disclosure Vulnerability
An authenticated Information Disclosure Vulnerability was found in WordPress Advanced Contact form 7 DB Plugin 1.10 version. In the file /admin/class-advanced-cf7-db-admin.php, in the function vszcf7editformajax there's no proper check who can view the contact form entry data. Solution Update the...
gib-acht-im-verkehr.de XSS vulnerability
Open Bug Bounty ID: OBB-279399 Description| Value ---|--- Affected Website:| gib-acht-im-verkehr.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
picreel.com XSS vulnerability
Open Bug Bounty ID: OBB-278524 Description| Value ---|--- Affected Website:| picreel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
rk-responsive-contact-form 1.0 - Authenticated Blind SQL Injection
The rk-responsive-contact-form WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
CVE-2015-2798
SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2015-2798
SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2015-2798
The CVE is for Joomla! Form Maker component: Contact Form Maker 1.0.1. The vulnerability is an SQL injection in the id parameter of a request, allowing remote attackers to execute arbitrary SQL commands. This is described in the CVE entry as a traditional SQLi affecting the component, with potent...
stadtwerke-warburg.de XSS vulnerability
Vulnerable URL: https://www.stadtwerke-warburg.de/form/kontaktform.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5328514 VIP website status:| No Check stadtwerke-warburg.de SS...
rossbach-sonnenhol.de XSS vulnerability
Open Bug Bounty ID: OBB-262687 Description| Value ---|--- Affected Website:| rossbach-sonnenhol.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ringtraining.de XSS vulnerability
Vulnerable URL: https://ringtraining.de/contact/do/sendContactform/nodesettings/78 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3512930 VIP website status:| No Check...
naturfasern.com XSS vulnerability
Vulnerable URL: http://www.naturfasern.com/kontakt/kontaktform.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16131669 VIP website status:| No Check naturfasern.com SSL...
hqs.sbt.siemens.com XSS vulnerability
Open Bug Bounty ID: OBB-258564 Description| Value ---|--- Affected Website:| hqs.sbt.siemens.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
floridasnatural.com XSS vulnerability
Vulnerable URL: http://www.floridasnatural.com/contact/employment.php?employid=1"...
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit
Exploit for php platform in category web applications !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...
esact.ipb.pt XSS vulnerability
Open Bug Bounty ID: OBB-250802 Description| Value ---|--- Affected Website:| esact.ipb.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PHPMailer 5.2.20 with Exim MTA - Remote Code Execution
PHPMailer 5.2.20 with Exim MTA - Remote Code Execution !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...