6164 matches found
Mapbox (API) - Filter Bypass & Persistent Vulnerability
Document Title: =============== Mapbox API - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1787 ID: 119802 Release Date: ============= 2016-06-06 Vulnerability Laboratory ID VL-ID:...
CVE-2016-1222
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
CVE-2016-1222
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
Cross site scripting
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
CVE-2016-1222
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
CVE-2016-1222
CVE-2016-1222 affects Kobe Beauty’s php-contact-form, where a cross-site scripting (XSS) vulnerability exists in versions prior to 2016-05-18. The issue allows an attacker to inject arbitrary script or HTML through a crafted URI (CWE-79). Public sources (JVN/JVNDB) classify the impact as arbitrar...
PT-2016-4648
Name of the Vulnerable Software and Affected Versions Kobe Beauty php-contact-form versions prior to 2016-05-18 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URI. This could potentially lead to unauthorized actions on the...
CVE-2016-1222: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...
WordPress Booking Calendar Contact Form Plugin SQL injection
An SQL injection exists in the WordPress Booking Calendar Contact Form Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
Kobe Beauty php-contact-form cross-site scripting vulnerability
Kobe Beauty php-contact-form is a software package from Kobe Beauty Japan that provides an auto-responder e-mail function. A cross-site scripting vulnerability exists in previous versions of Kobe Beauty php-contact-form commit e7d094ca8ab15215c32d6fa04d17e8519c8d21cf. An attacker can exploit this...
php-contact-form vulnerable to cross-site scripting
Overview php-contact-form provided by Kobe Beauty Co., Ltd. contains a cross-site scripting vulnerability CWE-79. Hirota Kazuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...
JVN#85112513: php-contact-form vulnerable to cross-site scripting
php-contact-form provided by Kobe Beauty Co., Ltd. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products...
Ninja Forms 2.9.36 to 2.9.42 - Multiple Vulnerabilities
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress Booking Calendar Contact Form Plugin SQL Injection Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin suffers from a SQL injection vulnerability by adding specially crafted shortco...
Multiple Vulnerabilities in WordPress Booking Calendar Contact Form Plugin
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin version prior to 1.0.23 suffers from a SQL injection, cross-site scripting...
WordPress Booking Calendar Contact Form 1.0.23 盲注
No description provided by source...
WordPress预订日历联系表单1.1.24 多个漏洞 (XSS, CSRF)
No description provided by source...
Wordpress Booking Calendar Contact Form Plugin <=1.1.23 - Shortcode SQL注入漏洞
No description provided by source...