4923 matches found
PrestaShop 1.5.1 - Persistent Cross-Site Scripting
PrestaShop or embed src='data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc 3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9y Zy8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0...
CVE-2010-5038
PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...
CVE-2010-5038
The CVE-2010-5038 entry describes a PHP remote file inclusion vulnerability in Groone’s Simple Contact Form, specifically in contact/contact.php. The issue allows an attacker to cause arbitrary PHP code execution by supplying a malicious URL in the abspath parameter. Affected software component: ...
CVE-2010-5038
PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...
Joomla YJ Contact us Component Local File Inclusion Vulnerability
No description provided by source. ================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...
Joomla! Component com_yjcontactus - Local File Inclusion
Joomla! Component comyjcontactus - Local File Inclusion ================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...
Joomla YJ Contact Local File Inclusion
================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...
Joomla YJ Contact us Component Local File Inclusion Vulnerability
Exploit for php platform in category web applications ================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...
WordPress Plugin Contact Form 2.7.5 - SQL Injection
WordPress Plugin Contact Form 2.7.5 - SQL Injection Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND...
WordPress Contact Form plugin <= 2.7.5 - SQL Injection
Contact Form plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Contact Form 2.7.5 SQL Injection / Patch
Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Plugin Contact Form 2.7.5 - SQL Injection
Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Contact Form plugin <= 2.7.5 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND...
Fast Secure 3.0.3.1 Cross Site Scripting
Vulnerability ID: HTB23036 Reference: http://www.htbridge.ch/advisory/xssinfastsecurecontactform.html Product: Fast Secure Contact Form wordpress plugin Vendor: Mike Challis http://www.fastsecurecontactform.com Vulnerable Version: 3.0.3.1 and probably prior Tested on: 3.0.3.1 Vendor Notification:...
WordPress Easy Contact Form Lite plugin <= 1.0.7 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Easy Contact Form Lite plugin = 1.0.7 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/easy-contact-form-lite.zip Version:...
WordPress Easy Contact Form Lite 1.0.7 SQL Injection
Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE $settingstablename SET position = '".$position."' WHERE ID =...
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE...
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection
Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE $settingstablename SET position = '".$position."' WHERE ID =...
XSS in Fast Secure Contact Form wordpress plugin
Vulnerability ID: HTB23036 Reference: http://www.htbridge.ch/advisory/xssinfastsecurecontactform.html Product: Fast Secure Contact Form wordpress plugin Vendor: Mike Challis http://www.fastsecurecontactform.com Vulnerable Version: 3.0.3.1 and probably prior Tested on: 3.0.3.1 Vendor Notification:...