CVE-2017-15919

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

CVE-2017-15919

The ultimate-form-builder-lite plugin for WordPress (versions prior to 1.3.7 ) is vulnerable to SQL Injection via the wp-admin/admin-ajax.php file. This flaw allows a remote, authenticated attacker to inject PHP objects, which can result in PHP Object Injection and potentially lead to arbitrary c...

CVE-2017-15919: Improper Neutralization of Special Elements used in an SQL Command

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

PT-2017-14283

Name of the Vulnerable Software and Affected Versions ultimate-form-builder-lite plugin versions prior to 1.3.7 Description The issue concerns SQL Injection, which can lead to PHP Object Injection. This occurs via the API endpoint "/wp-admin/admin-ajax.php". Recommendations For versions prior to...

Multiple Memory Corruption Vulnerabilities in STDU Converter Lite's TIFF Processing

STDU Converter Lite is a document format conversion tool. STDU Converter Lite is the result of multiple memory corruption vulnerabilities in the handling of TIFF images, which can be exploited by attackers to cause a program crash by constructing malformed TIFF-formatted images, or successfully...

VulnCheck KEV: CVE-2017-15919

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

FIBARO Home Center 2/Lite RCE Vulnerability

FIBARO Home Center 2/Lite are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FIBARO Home Center Detection

Detection of FIBARO Home Center. The script sends a connection request to the server and attempts to detect FIBARO Home Center and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

WordPress Event Espresso Lite Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Event Espresso Lite plugin. An attacker can exploit the vulnerability t...

CVE-2017-14760

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...

Sql injection

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...

CVE-2017-14760

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...

CVE-2017-14760

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...

CVE-2017-14760

The CVE-2017-14760 entry corresponds to an SQL Injection in the WordPress plugin Event Espresso Lite (event-espresso-free) , version 3.1.37.12.L, exploitable via the recurrence_id parameter to /wp-admin/admin.php in the file path includes/event-management/index.php . The connected documents confi...

WordPress Shoppable Images Lite plugin <=1.0.0 - Cross-Site Request Forgery (CSRF)/PHP Object Injection Vulnerabilities

WordPress Shoppable Images Lite plugin Cross-Site Request Forgery CSRF/PHP Object Injection Vulnerabilities were found in the showadminnotices function. The value of $GET nonce variable is unserialized, which allows PHP object injection. Solution Update the plugin...

Alienvault OSSIM av-centerd 4.7.0 - get_log_line Command Injection (Metasploit)

Alienvault OSSIM av-centerd 4.7.0 - getlogline Command Injection Metasploit require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlogline', 'Description' = %q This module exploits a command injection flaw found in the getlogline...

Huawei Phone App Lock Bypass Vulnerability

Huawei Honor 7 Lite is a smartphone product of Huawei China. App Lock is a feature in the Phone Manager App that effectively prevents others from using apps on your phone without permission. An application lock feature bypass vulnerability exists on the Huawei Honor 7 Lite phone. An attacker can...

LMS King Pro, SQL Injection

LMS King Lite and LMS King Professional by king-products.net, versions up to 3.2.3.19 lite and 3.2.3.47 pro, SQL Injection resolution: update to version 3.2.3.20 lite and 3.2.3.48 pro update notice url: https://www.king-products.net/lms-king.html...

Joomla Zap Calendar Lite 4.3.4 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Zap Calendar Lite 4.3.4 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://zcontent.net/ Software Link:...

Joomla Zap Calendar Lite 4.3.4 SQL Injection

Exploit Title: Joomla! Component Zap Calendar Lite 4.3.4 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://zcontent.net/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/zap-calendar-lite/ Demo: http://demo.zapcalendar.com/ Version: 4.3...