CVE-2024-12542

CVE-2024-12542 linkID = 0.1.2 - 認可の欠如による未認証の機密情報の漏えい 説明 linkID WordPress プラグインは、0.1.2 までの全バージョンにおいて、'phpinfo' 関数を含める際に権限チェックが欠如しているため、データへの不正アクセスに対して脆弱です。これにより、未認証の攻撃者がサイトのサーバー上の設定情報や定義済み変数を読み取ることが可能になります。この脆弱性の悪用には、プラグインが有効化されている必要はありません。 詳細 タイプ : プラグイン スラッグ : linkid 影響を受けるバージョン : 0.1.2 CVSS スコア...

CVE-2024-12542-PoC

CVE-2024-12542-PoC 認可の欠如による未認証の機密情報漏えい 脆弱性の説明 WordPress用linkIDプラグインは、0.1.2を含むそれ以前の全バージョンにおいて、phpinfo関数をインクルードする際に権限チェックが欠如しているため、データへの不正アクセスに対して脆弱です。これにより、認証されていない攻撃者がサイトのサーバー上の構成設定や定義済み変数を読み取ることが可能になります。この脆弱性を悪用するために、プラグインが有効化されている必要はありません。 スクリプトの説明 1. SSL検証の無効化 : SSL警告と検証を無効にします。 2. ログ関数 :...

CVE-2026-42455: Improper Neutralization of Input During Web Page Generation

Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In versions 2.14.0 and prior, the archive upload endpoint POST /api/v1/archives/linkId?format=4 accepts HTML files text/html without sanitizing JavaScript content. When the archive i...

EUVD-2008-5612

Malware in sbrugna...

EUVD-2006-2844

Malware in sbrugna...

EUVD-2008-5748

Malware in sbrugna...

EUVD-2006-6130

Malware in sbrugna...

CVE-2024-12542

The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined...

CVE-2024-12542 linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined...

CVE-2024-12542 linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined...

WordPress linkID plugin <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin linkID versions = 0.1.2...

WordPress plugin linkID 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-12542: Missing Authorization

The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined...

PT-2025-1892 · WordPress · Linkid Plugin

Name of the Vulnerable Software and Affected Versions: linkID plugin for WordPress versions up to, and including, 0.1.2 Description: The issue arises from a missing capability check when including the 'phpinfo' function, allowing unauthorized access to data. This enables unauthenticated attackers...

CVE-2017-6810: Improper Neutralization of Input During Web Page Generation

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.fplinks.php linkid parameter...

aspWebLinks 2.0 - Remote SQL Injection / Admin Pass Change Exploit

No description provided by source. !-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION:...

CVE-2012-5919

Multiple cross-site scripting XSS vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 find or 2 replace fields to havalite/findReplace.php; 3 username parameter to havalite/havalogin.php, 4 the Edit Article module, or 5 havapost.ph...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 find or 2 replace fields to havalite/findReplace.php; 3 username parameter to havalite/havalogin.php, 4 the Edit Article module, or 5 havapost.ph...

CVE-2009-4437: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to wishlist.asp and the 2 linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1...

Sql injection

Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors...