863 matches found
WordPress Plugin Events Calendar - 'event_id' SQL Injection
Exploit Title: Wichipi Events Calendar - SQL Injection Date: 09-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: codecanyon.net/user/wachipi Version: 1.0 CVE-ID: CVE-2018-5315 Events Calendar allows you to easily add to your website a powerfu...
WordPress Events Calendar Plugin - event_id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Wichipi Events Calendar - SQL Injection Date: 09-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: codecanyon.net/user/wachipi Version: 1.0 CVE-ID: CVE-2018-5315 Events...
WordPress Plugin Events Calendar - event_id SQL Injection
WordPress Plugin Events Calendar - eventid SQL Injection Exploit Title: Wichipi Events Calendar - SQL Injection Date: 09-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: codecanyon.net/user/wachipi Version: 1.0 CVE-ID: CVE-2018-5315 Events...
WordPress Simple Events Calendar plugin <=1.3.5 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability found by Lenon Leite in WordPress Simple Events Calendar plugin versions =1.3.5. Solution 11/20/2017 - we were unable to find a patched version of this plugin...
Simple Events Calendar <= 1.3.5 - Authenticated SQL Injection
Type user access: administrator user. $POST‘eventid’ is not escaped. File / Code: Path Request: /wp-content/plugins/simple-events-calendar/simple-events-calendar.php Line : 467 $editevent = $POST'eventid'; $update = $wpdb-getresults " SELECT FROM $tablename WHERE id = $editevent ", "ARRAYA" ; PoC...
contact.hamptonroads.com XSS vulnerability
Open Bug Bounty ID: OBB-260005 Description| Value ---|--- Affected Website:| contact.hamptonroads.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Eventix Events Calendar by Informafix,1.0,SQL Injection
Eventix Events Calendar by Informafix, 1.0, SQL Injection...
Joomla! Component Eventix Events Calendar 1.0 - SQL Injection
Joomla! Component Eventix Events Calendar 1.0 - SQL Injection Exploit Title: Joomla! Component Eventix Events Calendar v1.0 - SQL Injection Google Dork: inurl:index.php?option=comeventix Date: 21.02.2017 Vendor Homepage: http://informafix.fr/ Software Buy:...
Joomla! Component Eventix Events Calendar 1.0 - SQL Injection
Exploit Title: Joomla! Component Eventix Events Calendar v1.0 - SQL Injection Google Dork: inurl:index.php?option=comeventix Date: 21.02.2017 Vendor Homepage: http://informafix.fr/ Software Buy: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/eventix-events-calendar/...
U.S. Dept Of Defense: Arbitary file download vulnerability on a DoD website
A DoD website was misconfigured in a manner that could have allowed an attacker to collect sensitive information about the web application or system. @psychomantis was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us of this vulnerability!...
The Events Calendar <= 4.1.1 - Open Redirect
The problem is located in the "tribe-bar-view" parameter that can be used to redirect a user to an arbitrary website. Timeline 2016-04-04 : Initial contact with Modern Tribe 2016-04-05 : Modern Tribe confirms the report 2016-04-07 : Modern Tribe publishes a new version 4.1.1.1 that resolves the...
The Events Calendar <= 4.1.1 - Open Redirect
The problem is located in the "tribe-bar-view" parameter that can be used to redirect a user to an arbitrary website. Timeline 2016-04-04 : Initial contact with Modern Tribe 2016-04-05 : Modern Tribe confirms the report 2016-04-07 : Modern Tribe publishes a new version 4.1.1.1 that resolves the...
WordPress The Events Calendar Plugin <= 4.1.1 - Open Redirection
This plugin is prone to an open redirection vulnerability in the "tribe-bar-view" parameter. Solution Update the plugin...
WordPress The Events Calendar Plugin <= 4.1.1 - Open Redirection
This plugin is prone to an open redirection vulnerability in the "tribe-bar-view" parameter. Solution Update the plugin...
Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities
Document Title: =============== Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1779 View Video: https://www.youtube.com/watch?v=-XLlpnjZXFM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1778...
The Events Calender: Eventbrite Tickets 3.9.6 Cross Site Scripting
Details ================ Software: The Events Calendar: Eventbrite Tickets Version: 3.9.6 Homepage: https://theeventscalendar.com/product/wordpress-eventbrite-tickets/ Advisory report:...
WordPress Events Calendar Plugin <= 6.7.11a - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
The Events Calendar <= 3.0 - Reflected Cross-Site Scripting (XSS)
The The Events Calendar WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...