6165 matches found
WordPress CP Contact Form With Paypal 1.1.5 CSRF / XSS / SQL Injection
Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ Vulnerability...
CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities
The CP Contact Form with PayPal WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress Contact Form Builder Plugin <= 1.0.24 - Blind SQL Injection
Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Upgrade this plugin...
Contact Form Maker Component SQL Injection Vulnerability
Joomla! is an open source content management system that provides RSS feeds, site search, etc. Contact Form Maker is a component for creating submission forms. A SQL injection vulnerability exists in the Joomla! Contact Form Maker component that can be exploited by remote attackers to submit a...
WordPress Encrypted Contact Form plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Encrypted Contact Form plugin is a WordPress plugin that uses end-to-end encryption to send user information. A...
WordPress Encrypted Contact Form Plugin 1.0.4 - CSRF Vulnerability
Exploit for php platform in category web applications Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL:...
WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery
WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL:...
WordPress Encrypted Contact Form Plugin 1.0.4 - CSRF
Encrypted Contact Form plugin is prone to a cross-site request forgery vulnerability via unsanitized "post" parameter. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the iframeurl parameter in an Update Page action in the...
CVE-2015-4010
Cross-site request forgery CSRF vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the iframeurl parameter in an Update Page action in the...
CVE-2015-4010: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the iframeurl parameter in an Update Page action in the...
WordPress Encrypted Contact Form 1.0.4 CSRF / XSS
Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site...
CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4
Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site...
Ninja Forms <= 2.9.18 - Cross-Site Scripting (XSS)
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Wordpress N-Media Website Contact Form with File Upload 1.5 - Local File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: website contact form with file upload 1.5 Exploit Local File Inclusion Google Dork: inurl:"/plugins//website-contact-form-with-file-upload/" Date: 07.05.2015 Exploit Author: T3N38R15 Software Link:...
WordPress Booking Calendar Contact Form Plugin 1.0.2 /dex_bccf.php SQL注入漏洞
/dexbccf.phpfunction dexbccfcaculateprice$startday, $enddate, $calendar, $defaultprice ... //$calendar is not sanitized in sql query $codes = $wpdb-getresults 'SELECT FROM '.$wpdb-prefix.DEXBCCFSEASONPRICESTABLENAMENOPREFIX.' WHERE calid='.$calendar; $mode =...
WordPress Contact Form Plugin <= 3.34 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability via contactform.php cntctfrmcontactmessage parameter. Solution Update the plugin...
WordPress Quick Contact Form Plugin <= 6.2 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Encrypted Contact Form 1.0.4 CSRF / XSS
Title: Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site Request Forgery...
Booking Calendar Contact Form <= 1.0.2 - Multiple Authenticated Vulnerabilities
The Booking Calendar Contact Form WordPress plugin was affected by a Multiple Authenticated Vulnerabilities security vulnerability...