Joomla! Component Advertisement Board 3.0.4 - id SQL Injection

Joomla! Component Advertisement Board 3.0.4 - id SQL Injection Exploit Title: Joomla! Component Advertisement Board v3.0.4 - SQL Injection Google Dork: inurl:index.php?option=comadvertisementboard Date: 14.03.2017 Vendor Homepage: http://ordasoft.com/ Software :...

CVE-2017-6811

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.shop.php id parameter...

CVE-2017-6812

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...

Cross site scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6808

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.faq.php id parameter...

CVE-2017-6809

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6809

MaNGOSWebV4 4.0.8 is described as vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter). This CVE entry references a reflected XSS condition without provided exploit steps or remediation details in the connected documents. NVD lists a MEDIUM overall impact (CVS...

CVE-2017-6811

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.shop.php id parameter...

CVE-2017-6808

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.faq.php id parameter...

CVE-2017-6812

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...

PT-2017-17339

Name of the Vulnerable Software and Affected Versions paintballrefjosh/MaNGOSWebV4 version 4.0.8 Description The issue is related to a reflected XSS in the inc/admin/template files/admin.faq.php file, specifically affecting the id parameter. Recommendations For version 4.0.8, consider restricting...

CVE-2017-6809: Improper Neutralization of Input During Web Page Generation

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6811: Improper Neutralization of Input During Web Page Generation

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.shop.php id parameter...

CVE-2017-6808: Improper Neutralization of Input During Web Page Generation

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.faq.php id parameter...

PT-2017-17342

Name of the Vulnerable Software and Affected Versions paintballrefjosh/MaNGOSWebV4 version 4.0.8 Description The issue concerns a reflected XSS in the inc/admin/template files/admin.shop.php file, specifically affecting the id parameter. Recommendations For version 4.0.8, consider restricting...

PT-2017-17340

Name of the Vulnerable Software and Affected Versions paintballrefjosh/MaNGOSWebV4 version 4.0.8 Description The issue is related to a reflected XSS in the inc/admin/template files/admin.donate.php file, specifically affecting the id parameter. Recommendations For version 4.0.8, avoid using the i...

PT-2017-17343

Name of the Vulnerable Software and Affected Versions paintballrefjosh/MaNGOSWebV4 version 4.0.8 Description The issue concerns a reflected XSS in the inc/admin/template files/admin.vote.php file, specifically affecting the id parameter. Recommendations For version 4.0.8, consider restricting...

CVE-2017-6812: Improper Neutralization of Input During Web Page Generation

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...

CVE-2017-6571

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...