44 matches found
CVE-2024-1287
CVE-2024-1287 affects the WordPress plugin Pay Memberships Pro - Member Directory Add On (pmpro-member-directory) prior to version 1.2.6. The issue allows users with at least the Contributor role to leak other users’ sensitive information, including password hashes, via an SQL Injection vector. R...
WordPress plugin pmpro-member-directory 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in...
PT-2024-17770 · Unknown · Pmpro-Member-Directory
Name of the Vulnerable Software and Affected Versions: pmpro-member-directory versions prior to 1.2.6 Description: The issue allows users with at least the contributor role to leak other users' sensitive information, including password hashes. Recommendations: For versions prior to 1.2.6, update ...
WordPress Paid Memberships Pro - Member Directory Add On Plugin < 1.2.6 is vulnerable to SQL Injection
Software Paid Memberships Pro - Member Directory Add On Type Plugin Vulnerable versions 1.2.6 Fixed in 1.2.6 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1287 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 7039256f577b Credits Scott Kingsley Clark...
Sql injection
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of...
WordPress Netforum Member Directory Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)
Software Netforum Member Directory Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e544beed4a6a Credits Rafie Muhammad Patchstack...
WordPress Netforum Member Directory plugin <= 1.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Netforum Member Directory plugin versions = 1.11. Solution No patched version available...
WordPress Netforum Member Directory plugin <= 1.11 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Netforum Member Directory plugin versions = 1.11. Solution No patched version available...
WordPress Symposium 14.05.02 Cross Site Request Forgery
Plugin Name : WP Symposium A8-Cross-SiteRequestForgeryCSRF Effected Version : 14.05.02 and most probably lower version's if any Vulnerability : A8-Cross-Site Request Forgery CSRF Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Unauthenticated PoC - Proof of Concep...
thescl.com XSS vulnerability
Vulnerable URL: https://www.thescl.com/memberdirectory?search=1=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6446320 Google Pagerank| 5 VIP website status:| No Check thescl.com...
WordPress WP Symposium Plugin 15.1 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability Date: 2015-07-30 Exploit Author: PizzaHatHacker Vendor Homepage: http://www.wpsymposium.com/ Version: ? = version = 15.5.1 Tested on: Apache / WordPress...
DMXReady Member Directory Manager <= 1.1 - SQL Injection Vulnerability
No description provided by source. Title : DMXReady Member Directory Manager = 1.1 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 99.97 $ Dork : inurl:incmemberdirectorymanager.asp DorkEx :...
CMS Balitbang Depdiknas 3.4 HTML Injection
============================================ CMS Balitbang Depdiknas v3.4 HTML Injection ============================================ :----------------------------------------------------------------------------------------------------: : Exploit Title : CMS Balitbang Depdiknas v3.4 HTML Injectio...
About Dedecms variable coverage exploits-vulnerability warning-the black bar safety net
Someone recently broke the dedecms variable coverage holes,it is also a quite interesting vulnerability, and in some cases dedecms this variable vulnerability to exist for so long in some people are many years,about six months ago I also independently discovered by 本文 [email protected] Write ...
Sql injection
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-0427
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-0427
SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Member Directory Manager 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2009-0427
DMXReady Member Directory Manager 1.1 and earlier are affected by a SQL injection in CategoryManager/upload_image_category.asp (cid parameter), enabling remote attackers to execute arbitrary SQL commands. Affected component is the upload_image_category.asp endpoint within CategoryManager. The vul...
DMXReady Member Direcotry Manager 1.1 SQL Injection
Title : DMXReady Member Directory Manager http://target/path/applications/MemberDirectoryManager/incmemberdirectorymanager.asp Edit - http://target/path/admin/MemberDirectoryManager/components/CategoryManager/uploadimagecategory.asp?cid=SQL Inject Example: USERNAME-...
DMXReady Member Directory Manager <= 1.1 SQL Injection Vulnerability
No description provided by source. Title : DMXReady Member Directory Manager = 1.1 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 99.97 $ Dork : inurl:incmemberdirectorymanager.asp DorkEx :...