8640 matches found
WordPress Gravity Forms Plugin <= 2.0.6.5 - XSS
This plugin is prone to a cross site scripting vulnerability. It allows attackers to inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Gravity Forms <= 2.0.6.5 - Authenticated Blind Cross-Site Scripting (XSS)
A blind XSS vulnerability exists in the GravityForms plugin prior to version 2.0.7, in the select option dropdown boxes on forms. If the select column is displayed on the gfentries page when viewed in the Dashboard, the code is executed by the admin / viewer of the submissions. This vulnerability...
Adobe Reader DC XFA forms Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Adobe Reader DC XFA Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
CVE-2016-0370
Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product...
CVE-2016-0370
IBM Forms Experience Builder 8.5, 8.5.1 and 8.6 are affected by a cross-site scripting (XSS) vulnerability that can be triggered by crafted input in applications built with the product. The root cause is input not being adequately filtered, allowing an attacker with administrator access to cause ...
CVE-2016-0370
Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product...
IBM Forms Experience Builder Cross-Site Scripting Vulnerability
IBM Forms Experience Builder is a set of U.S. IBM's Web forms for creating Web site applications. A cross-site scripting vulnerability exists in versions 8.5, 8.5.1, and 8.6 of IBM Forms Experience Builder that stems from the program not adequately filtering user-submitted input. When a user...
WordPress Ninja Forms Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress Ninja Forms Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
WordPress Ninja Forms Plugin <= 2.9.55.1 - Authenticated SQL Injection
There is a bug in this plugin. It could leak the site’s usernames and hashed passwords. Solution Update the plugin...
Ninja Forms <= 2.9.55.1 - Authenticated SQL Injection
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
IBM Forms Experience Builder Cross-Site Request Forgery Vulnerability
IBM Forms Experience Builder is a suite of applications for creating Web forms for Web sites. A cross-site request forgery vulnerability exists in IBM Forms Experience Builder that allows a remote attacker to construct a malicious URI, trick a user into parsing it, and perform malicious actions i...
Foxit Reader < 7.2 Multiple RCE
Binary data 9458.prm...
WordPress plugin Vospari Forms <= 1.3 - Reflected Cross-Site Scripting (XSS) vulnerability
WordPress plugin Vospari Forms version 1.3 vulnerable to Reflected Cross-Site Scripting XSS. Altering the URL would allow for the XSS to be executed for further exploitation. Solution Update plugin to the latest version at least version 1.4...
WordPress Ninja Forms Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site . Ninja Forms is one of the form plug-ins . A cross-site scripting vulnerability exists in version 2.9.51 of t...
WordPress Ninja Forms Plugin <= 2.9.51 - Multiple Cross Site Scripting
Because of this vulnerability, attackers can inject malicious JavaScript code into the application. Solution Update this plugin...
WordPress Ninja Forms 2.9.51 Cross Site Scripting
------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Ninja Forms WordPress Plugin ------------------------------------------------------------------------ Han Sahin, July 2016...
Ninja Forms <= 2.9.51 - Multiple Authenticated Cross-Site Scripting (XSS)
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Multiple Authenticated Cross-Site Scripting XSS security vulnerability...
