28 matches found
CVE-2019-1010209
GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.phpL5637. The fixed version is: 1.4.14...
Code injection
GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.phpL5637. The fixed version is: 1.4.14...
CVE-2019-1010209
GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.phpL5637. The fixed version is: 1.4.14...
CVE-2019-1010209
GoUrl.io GoURL Wordpress Plugin (versions ≤ 1.4.13) is affected by CWE-434, enabling unauthenticated attackers to upload an executable via gourl.php#L5637; fixed in 1.4.14. Context: the issue is documented across multiple advisories (NVD, RH, osv, PRION) with the same description. No exploit deta...
GoUrl Bitcoin Payment Gateway < 1.4.14 - Shell Upload
The GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership WordPress plugin was affected by a Shell Upload security vulnerability...
CVE-2017-11718
There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php...