Moodle cross-site scripting vulnerability (CNVD-2017-27611)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in the contact form on the 'non-respondent...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. The application does not sanitize the $subject parameter in the contact form on the "non-respondents" page, allowing a malicious user to inject and execute arbitrary web script...

Design/Logic Flaw

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

UBUNTU-CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

CVE-2017-12156

CVE-2017-12156 affects Moodle 3.x, with an XSS in the contact form on the non-respondents page of non-anonymous feedback. The vulnerability enables script injection (confidentiality/integrity impact listed as low) with user interaction required and network access. Public details show Fedora advis...

PT-2017-12371

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description The issue is related to a cross-site scripting XSS flaw in the contact form on the "non-respondents" page in non-anonymous feedback. Recommendations For Moodle versions 3.x, update to a version that includes a f...

CVE-2017-12156: Improper Neutralization of Input During Web Page Generation

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback...

stmaryhc.org XSS vulnerability

Vulnerable URL: http://www.stmaryhc.org/about/contactform.php/%22%27--!%3E%3CScript%20/K/%3Econfirm1%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4781534 VIP...

WordPress rk-responsive-contact-form SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. rk-responsive-contact-form is one of the responsive contact form plugin. A SQL injection vulnerability exists in...

CVE-2017-1002027

Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rkuserlist.php...

CVE-2017-1002027

CVE-2017-1002027 affects the WordPress plugin rk-responsive-contact-form v1.0. The root cause is SQL injection in rk_user_list.php where the parameter $delid is not sanitized before inclusion in a query. Public references describe this as an Authenticated Blind SQL Injection (WPVulndb) and the NV...

CVE-2017-1002027: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rkuserlist.php...

PT-2017-11016

Name of the Vulnerable Software and Affected Versions rk-responsive-contact-form version 1.0 Description The issue concerns a lack of sanitization for the $delid variable before it is used in an SQL query, located in the file ./rk-responsive-contact-form/include/rk user list.php. This could...

WordPress Contact Form 7 International SMS Integration 1.2 XSS Vulnerability

WordPress Contact Form 7 International SMS Integration plugin version 1.2 suffers from a cross site scripting vulnerability. | Exploit Title: Wordpress Contact Form 7 International Sms Integration Plugin Cross Site Scripting | Exploit Author: Ashiyane Digital security Team | Vendor Homepage :...

WordPress Contact Form 7 International SMS Integration 1.2 XSS

| | Exploit Title: Wordpress Contact Form 7 International Sms Integration Plugin Cross Site Scripting | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://wordpress.org/plugins/cf7-international-sms-integration/ | Software Link:...