299 matches found
CVE-2019-16243: Missing Authentication for Critical Function
On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows unprivileged JavaScript, including JavaScript running within the KaiOS browser, to view and edit the device's firmware over-the-air update settings. This web API is normally used by the system application...
CVE-2012-6652
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress wppageflip allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pageflipbooklanguage parameter...
Directory traversal
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress wppageflip allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pageflipbooklanguage parameter...
CVE-2012-6652
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress wppageflip allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pageflipbooklanguage parameter...
CVE-2012-6652
Summary: CVE-2012-6652 describes a directory traversal vulnerability in the WordPress plugin “Page Flip Book” (wppageflip), specifically in the pageflipbook.php script that processes the pageflipbook_language parameter, allowing remote attackers to include and execute arbitrary local files. The i...
CVE-2012-6652: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress wppageflip allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pageflipbooklanguage parameter...
FlipBuilder Flip PDF cross-site scripting attack vulnerability
FlipBuilder Flip PDF is a PDF conversion tool to convert PDF documents to flash/HTML5 e-magazine. FlipBuilder Flip PDF has a cross-site scripting attack vulnerability. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'currentHTMLURL' parameter...
Joomla! Component Flip Wall 8.0 - 'wallid' SQL Injection
Exploit Title: Joomla! Component Flip Wall 8.0 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://pulseextensions.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/flip-wall/ Demo:...
Joomla! Component Flip Wall 8.0 - wallid SQL Injection
Joomla! Component Flip Wall 8.0 - wallid SQL Injection Exploit Title: Joomla! Component Flip Wall 8.0 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://pulseextensions.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/flip-wall/ Demo...
Cross site scripting
Cross-site scripting XSS vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter...
CVE-2017-7384
Cross-site scripting XSS vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter...
CVE-2017-7384
The provided data describes a Cross-Site Scripting (XSS) vulnerability in FlipBuilder Flip PDF, exploitable by remote attackers via the currentHTMLURL parameter to inject arbitrary web script or HTML. Affected software is FlipBuilder Flip PDF; the underlying cause and exact exploit vector are not...
CVE-2017-7384: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter...
lahuertajalisco.gob.mx XSS vulnerability
Vulnerable URL: http://www.lahuertajalisco.gob.mx/Flip/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| Yes, at 03.10.2017 Latest check for patch:| 03.10.2017 14:55 GMT Vulnerability type:|...
pdf.skabertrang.dk XSS vulnerability
Open Bug Bounty ID: OBB-227727 Description| Value ---|--- Affected Website:| pdf.skabertrang.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Android Rowhammer attack vulnerability (Drammer)
Project Description Drammer is a new attack that exploits the Rowhammer hardware vulnerability on Android devices. It allows attackers to take control over your mobile device by hiding it in a malicious app that requires no permissions. Practically all devices are possibly vulnerable and must wai...
Critical Android Vulnerability 'Drammer' Impacts Millions of Handsets
Researchers have published details of a new method for exploiting a problem with Android devices tied to a hardware flaw within DRAM memory modules that can allow attackers to get root-level access to target machines. The vulnerability, dubbed Drammer, could give an attacker root access to millio...
WordPress Flip Slideshow Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Flip Slideshow Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Simple Coin Flip (Phone+Wear) - External URLs, Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Simple Coin Flip Phone+Wear published at the 'play' market has multiple vulnerabilities...