CVE-2017-6216

novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution...

CVE-2017-6216: Improper Neutralization of Input During Web Page Generation

novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution...

PT-2019-8586

Name of the Vulnerable Software and Affected Versions novaksolutions/infusionsoft-php-sdk version v2016-10-31 novaksolutions/infusionsoft-php-sdk versions before v1.0 Description The issue is related to a reflected XSS in the leadscoring.php file, which can result in code execution. The ContactId...

cloudpipes.com XSS vulnerability

Vulnerable URL: https://www.cloudpipes.com/integrations/infusionsoft/segment/%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 202179 VIP website status:| No Coordinated Disclosure Timeline:...

Wordpress infusionsoft plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. infusionsoft is one of the marketing platform plug-ins. A cross-site scripting vulnerability exists in Wordpress...

CVE-2016-1000139

Reflected XSS in wordpress plugin infusionsoft v1.5.11...

CVE-2016-1000139

Reflected XSS in wordpress plugin infusionsoft v1.5.11...

Cross site scripting

Reflected XSS in wordpress plugin infusionsoft v1.5.11...

CVE-2016-1000139

Reflected XSS in wordpress plugin infusionsoft v1.5.11...

CVE-2016-1000139

The WordPress Infusionsoft Gravity Forms Add-on Plugin

PT-2016-4531

Name of the Vulnerable Software and Affected Versions Infusionsoft version 1.5.11 Description The issue is related to a Reflected XSS in the wordpress plugin Infusionsoft. Recommendations For version 1.5.11, update to a newer version that contains a fix for this issue...

CVE-2016-1000139: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin infusionsoft v1.5.11...

Infusionsoft Gravity Forms Add-on <= 1.5.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Infusionsoft Gravity Forms Add-on WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/infusionsoft/Infusionsoft/examples/leadscoring.php?ContactId=""...

WordPress Infusionsoft Gravity Forms Add-on Plugin <= 1.5.11 - XSS

This plugin is prone to a cross site scripting vulnerability. Solution Upgrade the plugin...

Infusionsoft Gravity Forms Add-on <= 1.5.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Infusionsoft Gravity Forms Add-on WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/infusionsoft/Infusionsoft/examples/leadscoring.php?ContactId="alert1;"...

Wordpress InfusionSoft Shell Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress InfusionSoft Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the WordPress...

WordPress Infusionsoft Gravity Forms Add-on Plugin Unrestricted File Upload

An unauthorized file upload vulnerability has been reported in WordPress Infusionsoft Gravity Forms Add-on Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a...

wordpress infusionsoft 1.5.10 /wp-content/plugins/infusionsoft/Infusionsoft/utilities/code_generator.php 文件上传漏洞

No description provided by source...

Wordpress InfusionSoft Plugin Upload Vulnerability

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::HTTP::Wordpress include...

WordPress InfusionSoft Plugin - Upload Vulnerability

InfusionSoft plugin is prone to vulnerability that allows for arbitrary file upload and remote code execution. Solution Update the plugin...