9770 matches found
PT-2014-6275
Name of the Vulnerable Software and Affected Versions Free Reprintables ArticleFR versions 3.0.4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a rate.php endpoint, specifically through a 1 get or 2 set action...
Dashing Times SQL Injection
dashing times cms scripts, sql injection vulnerability. products page: http://www.dashingtimes.in/portfolio/ authorpentester: 3spi0n on social: twitter.com/eyyamgudeer description i found vulnerability all cms scripts of dashingtimes web design. some weak websites + categories.php, catid param...
PT-2014-6429
Name of the Vulnerable Software and Affected Versions Bitdefender GravityZone versions prior to 5.1.11.432 Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved through the Web Console by using a .. dot dot ...
CVE-2014-5200
SQL injection vulnerability in gameplay.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2014-6339
Name of the Vulnerable Software and Affected Versions FB Gorilla plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the game play.php file. Recommendations For the FB Gorill...
CVE-2014-5200: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in gameplay.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2014-5189
SQL injection vulnerability in lib/optin/optinpage.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2014-6328
Name of the Vulnerable Software and Affected Versions Lead Octopus plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the lib/optin/optin page.php file. This can lead to unauthorized access a...
PT-2014-5491
Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.20 Description The issue allows remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a 1 hid cat or 2 open folder form element, or 3 id parameter, whic...
CVE-2014-3774: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in items.php in TeamPass before 2.1.20 allow remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a 1 hidcat or 2 openfolder form element, or 3 id parameter, which is not properly handle...
CVE-2014-5189: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in lib/optin/optinpage.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in the All Video Gallery all-video-gallery plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogalleryvideos page to wp-admin/admin.php...
CVE-2014-5180
SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...
PT-2014-6321
Name of the Vulnerable Software and Affected Versions yawpp plugin version 1.2 Description The issue allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands. This can be achieved via vectors related to admin functions.php or admin update.php. For example, t...
CVE-2014-5186: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the All Video Gallery all-video-gallery plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogalleryvideos page to wp-admin/admin.php...
PT-2014-6325
Name of the Vulnerable Software and Affected Versions All Video Gallery plugin version 1.2 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter in an edit action in the "allvideogallery videos" page to...
CVE-2014-5180: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...
PT-2014-6319
Name of the Vulnerable Software and Affected Versions HDW Player Plugin hdw-player-video-player-video-gallery version 2.4.2 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter in the edit action to...
