4924 matches found
WordPress Contact Form Plugin <= 3.36 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in contactform.php cntctfrmcontactemail parameter. Solution Update the plugin...
WordPress Contact Form Plugin <= 3.82 - Unauthorized Language Manipulation
This plugin is prone to an unauthorized language manipulation vulnerability. Solution Update the plugin...
WordPress Contact Form Maker Plugin <= 1.7.30 - Blind SQL Injection
Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Update the plugin...
WordPress Contact Form Manager Plugin <= 1.4.1 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Contact Form Maker <= 1.7.30 - Authenticated Blind SQL Injection
The Contact Form by WD – responsive drag & drop contact form builder tool WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Contact Form Manager <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)
The Contact Form Manager WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...
WordPress Contact Form Manager Plugin <= 1.4.1 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
pwc.com XSS vulnerability
Vulnerable URL: http://www.pwc.com/content/pwc/global/forms/contactUs.engx.html?parentPagePath=x"...
bosch.ch XSS vulnerability
Vulnerable URL: http://www.bosch.ch/de/ch/contactform18/boschcontact.php/"/?showExpandable=3 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3747461 Google...
bosch.hr XSS vulnerability
Vulnerable URL: http://www.bosch.hr/hr/hr/contactform9/boschcontact.php/"/?showExpandable=0 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4047365 Google...
bosch.fr XSS vulnerability
Vulnerable URL: http://www.bosch.fr/fr/fr/contactform8/boschcontact.php/"/?showExpandable=3 Details: Description| Value ---|--- Patched:| Yes, at 07.12.2015 Latest check for patch:| 07.12.2015 01:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 473630 Google...
bosch.se XSS vulnerability
Vulnerable URL: http://www.bosch.se/sv/se/contactform12/boschcontact.php/"/?showExpandable=1 Details: Description| Value ---|--- Patched:| Yes, at 07.12.2015 Latest check for patch:| 07.12.2015 01:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1873577 Google...
delta.com XSS vulnerability
Vulnerable URL: https://www.delta.com/contactus/pages/commentcomplaint/emailusAction?inputPage=/pages/commentcomplaint/index.jsp=/pages/commentcomplaint/success/index.jsp=/pages/commentcomplaint/error/index.jsp=MM/dd/yyyy=false=falseemail=subject=Delta Vacations=====prefix=fname==lname== Details:...
Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Title : Subrion CMS 3.3.1.10 - Cross Site Scripting Vulnerability Author : ZwX Vendor : http://www.subrion.com/ Severity Level : Medium Tested on : Windows 7 ------------------------ Description ------------------------ An attacker can inject ...
Jetpack <= 3.7.0 - Stored Cross-Site Scripting (XSS)
Jetpack versions 3.7.0 and earlier are vulnerable to a cross-site scripting vulnerability in the contact form due to improper input sanitization. Reported by Marc-Alexandre Montpas from Sucuri...
WordPress Contact Form Generator plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . contact Form Generator is one of the contact form generator plugin . A cross-site request forgery vulnerability...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 create a field, 2 update a field, 3 delete a field, 4 create a form, 5 update a...
CVE-2015-6965
Multiple cross-site request forgery CSRF vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 create a field, 2 update a field, 3 delete a field, 4 create a form, 5 update a...
CVE-2015-6965
The CVE-2015-6965 entry describes multiple CSRF flaws in the WordPress Contact Form Generator plugin (version 2.0.1 and earlier) that allow an attacker to hijack administrator sessions by issuing crafted requests to the cfg_forms page under wp-admin/admin.php. Affected component is the plugin’s a...