7174 matches found
e-papierosy-forum.pl XSS vulnerability
Open Bug Bounty ID: OBB-632930 Description| Value ---|--- Affected Website:| e-papierosy-forum.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
forum-auto.ru XSS vulnerability
Open Bug Bounty ID: OBB-629761 Description| Value ---|--- Affected Website:| forum-auto.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
forumromanum.de XSS vulnerability
Open Bug Bounty ID: OBB-628249 Description| Value ---|--- Affected Website:| forumromanum.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-11715
The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject...
CVE-2018-11709
wpforogetrequesturi in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting XSS via the URI...
CVE-2018-11709
Summary: CVE-2018-11709 affects the WordPress WordPress wpForo Forum plugin (versions
CVE-2018-11709
wpforogetrequesturi in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting XSS via the URI...
pudelzucht.de XSS vulnerability
Open Bug Bounty ID: OBB-627009 Description| Value ---|--- Affected Website:| pudelzucht.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
wpForo Forum <= 1.4.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Version 1.4.11, and below, of the wpForo Forum WordPress Plugin were found to be vulnerable to Reflected Cross-Site Scripting XSS. The vulnerability was due to the Plugin using the $SERVER'REQUESTURI' PHP variable to create a URL string that was later output within HTML without any output encodin...
WordPress wpForo Forum plugin <=1.4.9 - Unauthenticated SQL Injection (SQLi) vulnerability
Unauthenticated SQL Injection via a search with the /forum/ wpfo parameter found by cate4cafe in WordPress wpForo Forum plugin versions =1.4.9. Solution Update the WordPress wpForo Forum plugin to the latest available version at least 1.4.11...
forum-auto.com XSS vulnerability
Open Bug Bounty ID: OBB-623921 Description| Value ---|--- Affected Website:| forum-auto.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
HadSky Light Forum system suffers from an override access vulnerability
HadSky Light Forum System is a free and open forum system for individual users. A vulnerability exists in the HadSky Light Forum System that can be exploited to gain unauthorized access to administrator sensitive information and all user sensitive information. An attacker can exploit the...
CVE-2018-11515
The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter...
Unauthorised Arbitrary File Downloads
Moodle is vulnerable to unauthorised arbitrary file downloads. It is possible because any authorized student with access to portfolio forum caller class can change the download URL to download any files...
wpForo Forum <= 1.4.9 - Unauthenticated SQL Injection
The wpForo Forum WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability. PoC http://www.example.com/index.php/community/?wpfd=0=relevancy=desc%2cselectfromselectsleep20a=fff=entire-posts...
wpForo Forum <= 1.4.9 - Unauthenticated SQL Injection
The wpForo Forum WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability. http://www.example.com/index.php/community/?wpfd=0&wpfob=relevancy&wpfo=desc%2cselectfromselectsleep20a&wpfs=fff&wpfin=entire-posts...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
