CVE-2016-10215

An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacke...

CVE-2016-10215

An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacke...

CVE-2016-10215

The CVE-2016-10215 entry concerns Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability arises from insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php, allowing an a...

CVE-2016-10215

An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacke...

Zigaform PHP Form Builder Contact And Survey 2.9.1 SQL Injection

Exploit Title: Zigaform - PHP Form Builder - Contact & Survey v2.9.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://php-form-builder.zigaform.com/ Software Buy: https://codecanyon.net/item/zigaform-php-form-builder-contact-survey/14889427 Demo:...

Zigaform - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Zigaform - PHP Form Builder - Contact & Survey v2.9.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://php-form-builder.zigaform.com/ Software Buy:...

CVE-2016-10215: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacke...

PT-2017-7812

Name of the Vulnerable Software and Affected Versions Fastspot BigTree bigtree-form-builder versions prior to 1.2 Description The issue is caused by insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a...

Zigaform - SQL Injection

Zigaform - SQL Injection Exploit Title: Zigaform - PHP Form Builder - Contact & Survey v2.9.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://php-form-builder.zigaform.com/ Software Buy: https://codecanyon.net/item/zigaform-php-form-builder-contact-survey/14889427 Demo:...

Zigaform - SQL Injection

Exploit Title: Zigaform - PHP Form Builder - Contact & Survey v2.9.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://php-form-builder.zigaform.com/ Software Buy: https://codecanyon.net/item/zigaform-php-form-builder-contact-survey/14889427 Demo:...

WA Form Builder 1.1 - Unauthenticated SQL Injection

$POST ‘waformsId’ is not escaped. WAFormBuilderuioutput is accessible to any user. PoC...

WA Form Builder 1.1 - Unauthenticated SQL Injection

$POST ‘waformsId’ is not escaped. WAFormBuilderuioutput is accessible to any user...

WordPress WA Form Builder Plugin <=1.1 - Unauthenticated SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress WA Form Builder Plugin <=1.1 - Unauthenticated SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Form Builder Plugin <= 1.05 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update this plugin...

Multiple Cross-Site Scripting Vulnerabilities in Wordpress Visual Form Builder Plugin

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language.Visual Form Builder is one of the plug-ins used to build fully functional contact forms. A cross-site scripting vulnerability exists in version 2.8.6 of the WordPress Visual Form Builder...

Easy Contact Form Builder <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-form WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/tidio-form/popup-insert-help.php?formId="alert1;"...

WordPress Form Builder Plugin <= 1.0 - Cross Site Scripting (XSS)

This vulnerability is in the php code ./tidio-form/popup-insert-help.php. Solution Update the plugin...

WordPress Visual Form Builder 2.8.6 Cross Site Scripting

Product: Visual Form Builder Version: 2.8.6 Exploit Author: Sachin Wagh Home page Link: https://wordpress.org/plugins/visual-form-builder/ ============================================================================ Details: The Visual Form Builder plugin for WordPress is prone to a multiple...

Visual Form Builder <= 2.8.2 - SQL Injection & Reflected XSS

The Visual Form Builder WordPress plugin was affected by a SQL Injection & Reflected XSS security vulnerability. PoC SQL Injection ------------- http://www.example.com/wp-admin/admin.php?page=visual-form-builder&form-filter;=1+or+1%3D2...