4924 matches found
CVE-2016-1222
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
CVE-2016-1222
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
Cross site scripting
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
CVE-2016-1222
CVE-2016-1222 affects Kobe Beauty’s php-contact-form, where a cross-site scripting (XSS) vulnerability exists in versions prior to 2016-05-18. The issue allows an attacker to inject arbitrary script or HTML through a crafted URI (CWE-79). Public sources (JVN/JVNDB) classify the impact as arbitrar...
CVE-2016-1222
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
WordPress Booking Calendar Contact Form Plugin SQL injection
An SQL injection exists in the WordPress Booking Calendar Contact Form Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
Kobe Beauty php-contact-form cross-site scripting vulnerability
Kobe Beauty php-contact-form is a software package from Kobe Beauty Japan that provides an auto-responder e-mail function. A cross-site scripting vulnerability exists in previous versions of Kobe Beauty php-contact-form commit e7d094ca8ab15215c32d6fa04d17e8519c8d21cf. An attacker can exploit this...
php-contact-form vulnerable to cross-site scripting
Overview php-contact-form provided by Kobe Beauty Co., Ltd. contains a cross-site scripting vulnerability CWE-79. Hirota Kazuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...
JVN#85112513: php-contact-form vulnerable to cross-site scripting
php-contact-form provided by Kobe Beauty Co., Ltd. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products...
Ninja Forms 2.9.36 to 2.9.42 - Multiple Vulnerabilities
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress Booking Calendar Contact Form Plugin SQL Injection Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin suffers from a SQL injection vulnerability by adding specially crafted shortco...
Multiple Vulnerabilities in WordPress Booking Calendar Contact Form Plugin
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin version prior to 1.0.23 suffers from a SQL injection, cross-site scripting...
WordPress Booking Calendar Contact Form 1.0.23 盲注
No description provided by source...
Wordpress Booking Calendar Contact Form Plugin <=1.1.23 - Shortcode SQL注入漏洞
No description provided by source...
WordPress预订日历联系表单1.1.24 多个漏洞 (XSS, CSRF)
No description provided by source...
WordPress Booking Calendar Contact Form<=1.1.24 - cpabc_appointments.php文件addslashes SQL Injection V
No description provided by source...
Joomla 组件 Contact Form Maker v1.0.1 参数id SQL注入漏洞
No description provided by source...
WordPress Booking Calendar Contact Form 1.0.23 CSRF / XSS
Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Privilege escalation / stored XSS vulnerabilities Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage:...
WordPress Booking Calendar Contact Form Plugin 1.0.23 - Multiple Vulnerabilities
This plugin is prone to multiple vulnerabilities, such as unauthenticated blind SQL injection, privilege escalation and stored XSS vulnerabilities. Solution Upgrade the plugin...
WordPress Booking Calendar Contact Form 1.0.23 Shortcode SQL Injection
Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com...