CVE-2017-15967

Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template...

CVE-2017-15967: Improper Neutralization of Special Elements used in an SQL Command

Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template...

PT-2017-14321

Name of the Vulnerable Software and Affected Versions Mailing List Manager Pro version 3.0 Description The issue allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template. Recommendations For Mailing List Manager Pro version 3.0,...

PT-2017-6863

Name of the Vulnerable Software and Affected Versions Paid Memberships Pro plugin versions prior to 1.8.4.3 for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the s parameter to "membershiplevels.php", "memberslist.php", or...

CVE-2017-9289: Improper Neutralization of Input During Web Page Generation

Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php edit parameter...

LebiShop Mall Backend Arbitrary File Reading Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The management background of this mall system provides the editing function of the system template file. The file parameter of this function page is no...

CVE-2015-5535: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the qtranslate page to wp-admin/options-general.php...

PT-2015-6978

Name of the Vulnerable Software and Affected Versions qTranslate plugin versions 2.5.39 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the qtranslate page to "wp-admin/options-general.php". This...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/Other/Edit.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

WordPress Amerisale Re Plugin -Reflected XSS

This plugin is prone to a cross site scripting vulnerability in netriesdetail/upload.php edit parameter. Solution Update the plugin...

PT-2015-5287

Name of the Vulnerable Software and Affected Versions Easing Slider plugin versions prior to 2.2.0.7 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML. The attack vector involves the edit...

CVE-2015-1436: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the 1 easingslidermanagecustomizations or 2 easingslidereditsliders page to wp-admin/admin.php...

WordPress Easing Slider Plugin <= 2.2.0.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "edit" parameter. Solution Upgrade the plugin...

CVE-2014-5276

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

CVE-2014-5276

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

CVE-2014-5276: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

PT-2014-6388

Name of the Vulnerable Software and Affected Versions Pro Chat Rooms Text Chat Rooms version 8.2.0 Description The issue allows remote authenticated users to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This can be achieved via two methods: 1 uploading ...

CVE-2014-4583: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in forms/messages.php in the WP-Contact wp-contact-sidebar-widget plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 edit, 2 orderdirection, 3 limitstart, 4 id, or 5 order parameter...

CVE-2014-0344

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter...

PT-2014-3575

Name of the Vulnerable Software and Affected Versions ZOHO ManageEngine OpStor versions prior to build 8500 Description The issue allows remote authenticated users to obtain Admin access by exploiting a privilege level checking flaw. This is achieved by using the name parameter in conjunction wit...