EUVD-2017-1624

Malware in sbrugna...

EUVD-2017-1625

Malware in sbrugna...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

WordPress Membership Simplified SQL Injection Vulnerability (CNVD-2017-33667)

WordPress Membership Simplified is a WordPress-specific membership plugin developed by American software developer William. A SQL injection vulnerability exists in the code of the membership-simplified-for-oap-members-only/updateDB.php file in WordPress Membership Simplified version 1.58, which...

WordPress Membership Simplified SQL Injection Vulnerability

WordPress Membership Simplified is a WordPress-specific membership plugin developed by American software developer William. A SQL injection vulnerability exists in the code of the membership-simplified-for-oap-members-only/updateDB.php file in WordPress Membership Simplified version 1.58, which...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002009

CVE-2017-1002009 affects the WordPress plugin Membership Simplified v1.58. The vulnerability is in membership-simplified-for-oap-members-only/updateDB.php where unsanitized input via the recordId parameter in the delete function enables blind SQL injection. Impact details are stated as high/sever...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002008

CVE-2017-1002008 affects the WordPress plugin membership-simplified-for-oap-members-only v1.58. The vulnerability is in the file download.php, which does not verify that a user is logged in or has download privileges, enabling an attacker to obtain arbitrary files. Public writeups and advisories ...

CVE-2017-1002010

CVE-2017-1002010 affects the WordPress plugin Membership Simplified (v1.58). The issue is a blind SQL injection in the file membership-simplified-for-oap-members-only/updateDB.php, caused by insufficient sanitization of the input parameter recordId used in delete_media. Public metrics show a high...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002008: Unrestricted Upload of File with Dangerous Type

Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges...

CVE-2017-1002009: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

PT-2017-10998

Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability. It occurs because the code in the updateDB.php file does not properly sanitize user input via the recordId variable in the delete function...

PT-2017-10997

Name of the Vulnerable Software and Affected Versions membership-simplified-for-oap-members-only version 1.58 Description The issue concerns a lack of proper access control in the file download functionality. Specifically, the download.php file in the membership-simplified-for-oap-members-only...

PT-2017-10999

Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability in the Membership Simplified plugin for WordPress. Specifically, the code in the updateDB.php file is vulnerable because it fails to sanitize...