1497 matches found
WordPress WooCommerce - Store Exporter plugin <= 2.3.1 - CSV Injection vulnerability
CSV Injection vulnerability found by Vishnupriya Ilango FortiGuard Labs in WordPress WooCommerce - Store Exporter plugin versions = 2.3.1. Solution Update the WordPress WooCommerce - Store Exporter plugin to the latest available version at least 2.4...
DEBIAN-CVE-2012-1114
A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...
Security update for haproxy (moderate)
openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2019:2555-1 Rating: moderate References: 1142529 Cross-References: CVE-2019-14241 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for haproxy ...
CVE-2019-11325: Improper Encoding or Escaping of Output
An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter...
CVE-2016-11000
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
Sql injection
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
CVE-2016-11000
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
CVE-2016-11000
CVE-2016-11000 affects the WordPress plugin wp-ultimate-exporter (versions up to 1.1). The vulnerability is an SQL injection in the export_type_name parameter, with CVSS vectors indicating high/moderate impact (CVSS v3.1: CRITICAL, 9.8; CVSS v2.0: HIGH, 7.5). The reports confirm the vulnerable co...
CVE-2016-11000: Improper Neutralization of Special Elements used in an SQL Command
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the exporttypename parameter...
WordPress woocommerce-exporter plugin elevation of privilege vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. woocommerce-exporter is used in one of the e-commerce website product, transaction information export plugin. A security...
CVE-2016-10935
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
CVE-2016-10935
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
Privilege escalation
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
CVE-2016-10935
CVE-2016-10935 affects the WordPress plugin “woocommerce-exporter” prior to version 1.8.4, with a described vulnerability of privilege escalation. The provided documents consistently identify the affected component as the WooCommerce – Store Exporter WordPress plugin and confirm the issue as priv...
CVE-2016-10935
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
CVE-2016-10935: Undefined Security Weakness
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...
WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...
CVE-2018-20968
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...
CVE-2018-20968
The CVE-2018-20968 issue affects the WordPress wp-ultimate-exporter plugin prior to version 1.4.2. It is a CSRF vulnerability where requests from an untrusted origin can be forged because the plugin does not adequately verify that requests come from trusted users. Impact details in public sources...