6164 matches found
Lunar CMS 3.3 - Cross-Site Request Forgery Persistent Cross-Site Scripting
Lunar CMS 3.3 - Cross-Site Request Forgery Persistent Cross-Site Scripting CSRF Add Admin =============== input type="hidden" name="name" value="Hacker"...
Lunar CMS 3.3 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
CSRF Add Admin ===============...
Contact Form 7 Plugin for WordPress CAPTCHA Validation Bypass
The Contact Form 7 Plugin for WordPress installed on the remote host is affected by a CAPTCHA validation bypass vulnerability due to a failure to properly verify that the CAPTCHA field has been submitted. This can allow an attacker to bypass the CAPTCHA and send spam or other types of data throug...
Xornic Contact Us Form CAPTCHA Bypass / XSS
Hi FD, So I got bored/felt nostalgia and decided I would go through the hotscripts website and audit the top 10 most popular PHP scripts PHP being my most proficient language. Y'know, for practice or something. Unfortunately, there were a number of factors that frustrated this effort: Most of the...
CVE-2014-3786
Multiple cross-site scripting XSS vulnerabilities in the contact module admin/modules/contact.php in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the 1 uemail or 2 subject parameter in the Contact form to contact/...
Pixie CMS 1.04 Cross Site Scripting
Pixie CMS v1.04 Contact form POST XSS Vulnerabilities Vendor: Pixie CMS Product web page: http://www.getpixie.co.uk Affected version: 1.04 Severity: Medium CVE: CVE-2014-3786 Demo page: http://demo.getpixie.co.uk Discovered by: Filippos Mastrogiannis @filipposmastro & Simone Memoli @Simon90Italy...
Formidable Forms Pro <= 1.06.02 - ofc_upload_image.php Arbitrary File Upload
The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress WordPress plugin was affected by an ofcuploadimage.php Arbitrary File Upload security vulnerability...
CVE-2014-2265
Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the wpcf7captchachallengecaptcha-719 parameter...
CVE-2014-2265
Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the wpcf7captchachallengecaptcha-719 parameter...
CVE-2014-2265
Rock Lobster/Contact Form 7 plugin for WordPress is affected in versions before 3.7.2. The issue is a CAPTCHA bypass where remote attackers can submit data by omitting the _wpcf7_captcha_challenge_captcha-719 parameter, effectively bypassing CAPTCHA protection. Root cause: CAPTCHA verification ca...
CVE-2014-2265: Undefined Security Weakness
Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the wpcf7captchachallengecaptcha-719 parameter...
PT-2014-4594 · Rock Lobster · Contact Form 7
Name of the Vulnerable Software and Affected Versions: Rock Lobster Contact Form 7 versions prior to 3.7.2 Description: The issue allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the wpcf7 captcha challenge captcha-719 parameter. This...
Code Execution vulnerability in Contact Form 7 for WordPress
Hello 3APA3A! I want to inform you about vulnerability in Contact Form 7 plugin for WordPress. This is Code Execution via Arbitrary File Uploading vulnerability. ------------------------- Affected products: ------------------------- Vulnerable are Contact Form 7 3.5.2 and previous versions. After...
Vulnerabilities in Contact Form 7 for WordPress
Hello 3APA3A! I want to inform you about vulnerabilities in Contact Form 7 plugin for WordPress. These are Code Execution via Arbitrary File Uploading vulnerabilities two attack vectors. This is addition to previous Code Execution vulnerability in Contact Form 7...
Elite Graphix ElitCMS 1.01 / PRO Cross Site Scripting / SQL Injection
Document Title: =============== Elite Graphix ElitCMS 1.01 & PRO - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1117 Release Date: ============= 2013-10-18 Vulnerability Laboratory ID VL-ID:...
Elite Graphix ElitCMS 1.01 & PRO - Multiple Vulnerabilities
Document Title: =============== Elite Graphix ElitCMS 1.01 & PRO - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1117 Release Date: ============= 2013-10-17 Vulnerability Laboratory ID VL-ID: ===================================...
Wordpress Quick Contact Form Plugin 6.0 - Persistent XSS
Exploit for php platform in category web applications TITLE ===== Quick Contact Form - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x DATE ==== 10/06/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Contact Form Wordpress...
Quick Contact Form 6.0 - Stored XSS
The Quick Contact Form WordPress plugin was affected by a Stored XSS security vulnerability...
WordPress Quick Contact Form Plugin 6.0 - Persistent XSS
Persistent XSS vulnerability has been discovered in Quick Contact Form plugin, because of a lack of input validation and output sanitization of the "qcfname4" paramater. Solution Upgrade to version 6.1...