Contact Form Plugin < 3.96 - XSS

The Contact Form by BestWebSoft WordPress plugin was affected by a XSS security vulnerability...

Joomla Contact Form Maker SQLi Vulnerability

The Joomla Contact Form Maker module is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! Component Contact Form Maker 1.0.1 - SQL Injection

Joomla! Component Contact Form Maker 1.0.1 - SQL Injection +Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability +Author: TUNISIAN CYBER +Date: 29/03/2015 +Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker...

Joomla! Component Contact Form Maker 1.0.1 - SQL Injection

+Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability +Author: TUNISIAN CYBER +Date: 29/03/2015 +Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker +Type:WebApp +Risk:High +Overview: Contact Form Maker v1.0.1...

Joomla Contact Form Maker 1.0.1 SQL Injection

+Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability +Author: TUNISIAN CYBER +Date: 29/03/2015 +Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker +Type:WebApp +Risk:High +Overview: Contact Form Maker v1.0.1...

WordPress Contact Form DB Plugin Cross-Site Scripting (CVE-2015-2040)

A cross-site scripting vulnerability has been reported in WordPress Contact Form DB Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress plugin Contact Form DB cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed in the PHP language, which supports personal blog sites on PHP and MySQL servers.Contact Form DB also known as CFDB and contact-form-7-to-database-extension is one of the plugins that can submit the create and...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin before 2.8.32 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete all plugin records via a request in the...

CVE-2015-1874

Cross-site request forgery CSRF vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin before 2.8.32 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete all plugin records via a request in the...

CVE-2015-1874

Cross-site request forgery CSRF vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin before 2.8.32 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete all plugin records via a request in the...

CVE-2015-1874

CVE-2015-1874 affects the WordPress plugin Contact Form DB (CFDB / contact-form-7-to-database-extension) up to version 2.8.31 (before 2.8.32). The vulnerability is a CSRF flaw that allows an attacker to hijack an authenticated administrator’s session to perform a privileged action: deleting all r...

Concrete CMS: Stored XSS in Contact Form

In Contact form there is an option to display Message when completed. There I have put the payload payload: " and the payload executed and saved permanently...

WordPress FormGet Contact Form Plugin 5.3 - Stored XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Upgrade this plugin...

FormGet Contact Form 5.3 - Stored XSS

The AJAX action ‘requestresponse’, defined in formget-contact-form/index.php line 278 is available to any logged in user. The parameter ‘value’ is accepted as valid, so long as the string ‘sideBar’ is found at a position other than 0 i.e. prefix the payload with a space. The ‘pageid’ parameter ca...

WordPress Contact Form DB 2.8.29 Cross Site Request Forgery

Details ================ Software: Contact Form DB Version: 2.8.29 Homepage: https://wordpress.org/plugins/contact-form-7-to-database-extension/ Advisory report: https://security.dxw.com/advisories/csrf-in-contact-form-db-allows-attacker-to-delete-all-stored-form-submissions/ CVE: CVE-2015-1874...

Contact Form DB <= 2.8.29 - Cross-Site Request Forgery (CSRF)

The contact-form-7-to-database-extension WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Plugin Contact Form DB Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed in the PHP language, which supports personal blog sites on PHP and MySQL servers.Contact Form DB also known as CFDB and contact-form-7-to-database-extension is one of the plugins that can submit the create and...

Contact Form DB <= 2.8.26 - Cross-Site Scripting (XSS)

The contact-form-7-to-database-extension WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CVE-2015-2040

Cross-site scripting XSS vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submittime parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submittime parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php...