CVE-2017-1180

The IBM TRIRIGA Document Manager Vulnerability (CVE-2017-1180) allows an authenticated user to perform actions they should not have access to, constituting a privilege-escalation issue. IBM lists affected TRIRIGA Application Platform versions 3.3.0–3.5.2.0 and notes fixes in 3.5.2.1, 3.4.2.6, and...

CVE-2017-1180: Undefined Security Weakness

The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference : 2001084...

WordPress SP Projects and Document Manager Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress SP Projects and Document Manager Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

WordPress SP Projects and Document Manager Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress SP Projects and Document Manager Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress SP Projects and Document Manager Plugin Arbitrary Code Execution

A code execution vulnerability exists in WordPress SP Projects and Document Manager Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

wordpress SP Projects and Document Manager V 2.5.9.6 XSS 漏洞

No description provided by source...

WordPress SP Projects And Document Manager Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

SP Projects & Document Manager <= 2.5.9.5 - Multiple Vulnerabilities

The SP Project & Document Manager WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress SP Projects And Document Manager 2.5.9.6 XSS / SQL Injection

Exploit Title: Multiple Vulnerabilities in SP Projects & Document Manager Discovery Date: 2016/01/13 Public Disclosure Date: 2016/03/06 Exploit Author: Michael Helwig Contact: https://twitter.com/c0dmtr1x Vendor Homepage: http://smartypantsplugins.com/ Software Link:...

WordPress SP Project & Document Manager plugin 'ajax.php' SQL injection vulnerability

WordPress is a blogging platform developed using the PHP language. The 'SP Project & Document Manager' plugin for WordPress suffers from a sql injection vulnerability in the implementation of 'ajax.php', which can be exploited by an attacker to take control of the application and perform...

WordPress SP Project & Document Manager 2.5.3 SQL Injection

SQL Injection vulnerability in WordPress SP Project & Document Manager plugin pid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress SP Project & Document Manager 2.5.3 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection Google Dork: inurl:wp-content/plugins/sp-client-document-manager Date: 2015-03-04 Exploit Author: catsecurity Vendor Homepage: http://smartypantsplugins.com...

WordPress Plugin SP Project & Document Manager 2.5.3 - Blind SQL Injection

Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection Google Dork: inurl:wp-content/plugins/sp-client-document-manager Date: 2015-03-04 Exploit Author: catsecurity Vendor Homepage: http://smartypantsplugins.com Software Link:...

WordPress SP Project & Document Manager Plugin 2.5.3 - Blind SQL Injection

SP Project & Document Manager plugin is prone to a blind SQL injection that is in the thumbnails function location: /wp-content/plugins/sp-client-document-manager/ajax.php. Solution Upgrade the plugin...

WordPress Plugin SP Project Document Manager 2.5.3 - Blind SQL Injection

WordPress Plugin SP Project Document Manager 2.5.3 - Blind SQL Injection Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection Google Dork: inurl:wp-content/plugins/sp-client-document-manager Date: 2015-03-04 Exploit Author: catsecurity Vendor Homepage:...

SP Client Document Manager <= 2.4.1 - Multiple SQL Injection

The SP Project & Document Manager WordPress plugin was affected by a Multiple SQL Injection security vulnerability...

CVE-2014-9178

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin sp-client-document-manager 2.4.1 and earlier for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 vendoremail parameter in the emailvendor functi...

Sql injection

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin sp-client-document-manager 2.4.1 and earlier for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 vendoremail parameter in the emailvendor functi...

CVE-2014-9178

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin sp-client-document-manager 2.4.1 and earlier for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 vendoremail parameter in the emailvendor functi...

CVE-2014-9178

CVE-2014-9178 affects the WordPress plugin “SP Client Document Manager” (sp-client-document-manager) up to version 2.4.1. The vulnerability is a Multiple SQL Injection in classes/ajax.php, exploitable via (1) vendor_email[] in the email_vendor function or (2) id in the download_project, (3) downl...