CVE-2017-2222

Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2222

Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2222

CVE-2017-2222 describes an XSS vulnerability in the WordPress WP-Members plugin affecting versions prior to 3.1.8. The primary description notes arbitrary script injection via unspecified vectors. Related sources consistently indicate the fix is to update to version 3.1.8 or later; some entries a...

PT-2017-15271 · WordPress · Wp-Members

Name of the Vulnerable Software and Affected Versions: WP-Members versions prior to 3.1.8 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations: For versions prior to 3.1.8, update to version 3.1.8 or late...

swog.org XSS vulnerability

Open Bug Bounty ID: OBB-259213 Description| Value ---|--- Affected Website:| swog.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress WP-Members Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress WP-Members plugin version 3.1.8. A remote attacker c...

JVN#51355647: WordPress plugin "WP-Members" vulnerable to cross-site scripting

The WordPress plugin "WP-Members" contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer. Products Affected WP-Members...

members.paultonsgolf.co.uk XSS vulnerability

Vulnerable URL: http://members.paultonsgolf.co.uk/pages.php?crown-golf-=1519"'--!confirmOPENBUGBOUNTY...

my.cashtrain.com.au XSS vulnerability

Vulnerable URL:...

Admidio Cross-Site Request Forgery Vulnerability (CNVD-2017-10374)

Admidio is a free online membership management system for associations, groups and organizations. The system offers features such as user management, adding and updating homepages, and installing and adjusting modules on it. A cross-site request forgery vulnerability exists in Admidio. The...

My Gaming Ladder Combo System 7.5 - SQL Injection

Exploit Title: My Gaming Ladder Combo System 7.5 - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: http://www.mygamingladder.com/ Software: http://www.mygamingladder.com/demos.shtml Demo: http://www.mygamingladder.com/upgrade/combo/ Version: 7.5 Tested on: Win7 x64, Kali Linux x6...

U.S. Trade Group Hacked by Chinese Hackers ahead of Trump-Xi Trade Summit

Researchers have uncovered a Chinese cyber-espionage against the United States ahead of the trade summit on Thursday between US President Donald Trump and China's President Xi Jinping. According to a new report published today by Fidelis Cybersecurity firm, the Chinese APT10 hacking group implant...

iFdate Social Dating Script 2.0 SQL Injection

Exploit Title: iFdate Social Dating Script v2.0 - SQL Injection Google Dork: N/A Date: 18.03.2017 Vendor Homepage: http://turnkeycentral.com/ Software: http://turnkeycentral.com/scripts/social-dating-script/ Demo: http://demo.turnkeycentral.com/ifdate/index.php Version: 2.0 Tested on: Win7 x64,...

iFdate Social Dating Script 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iFdate Social Dating Script v2.0 - SQL Injection Google Dork: N/A Date: 18.03.2017 Vendor Homepage: http://turnkeycentral.com/ Software: http://turnkeycentral.com/scripts/social-dating-script/ Demo:...

iFdate Social Dating Script 2.0 - SQL Injection

iFdate Social Dating Script 2.0 - SQL Injection Exploit Title: iFdate Social Dating Script v2.0 - SQL Injection Google Dork: N/A Date: 18.03.2017 Vendor Homepage: http://turnkeycentral.com/ Software: http://turnkeycentral.com/scripts/social-dating-script/ Demo:...

Advanced Matrimonial Script 2.0.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advanced Matrimonial Script v2.0.3 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/advanced-matrimonial/ Demo:...

Advanced Matrimonial Script 2.0.3 - SQL Injection

Exploit Title: Advanced Matrimonial Script v2.0.3 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/advanced-matrimonial/ Demo: http://74.124.215.220/admatrimon/ Version: 2.0.3 Tested on: Win7 x64, Ka...

Joomla Team Display 1.2.1 SQL Injection

Exploit Title: Joomla! Component Team Display v1.2.1 - SQL Injection Google Dork: inurl:index.php?option=comteamdisplay Date: 17.02.2017 Vendor Homepage: http://addonstreet.com/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/team-display/ Demo...

Joomla! Component Team Display 1.2.1 - filter_category SQL Injection

Joomla! Component Team Display 1.2.1 - filtercategory SQL Injection Exploit Title: Joomla! Component Team Display v1.2.1 - SQL Injection Google Dork: inurl:index.php?option=comteamdisplay Date: 17.02.2017 Vendor Homepage: http://addonstreet.com/ Software Buy:...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-3194-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3194-1 advisory. Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to birthday attacks. A remote attacker could possibly...