WordPress Membership Simplified SQL Injection Vulnerability (CNVD-2017-33667)

WordPress Membership Simplified is a WordPress-specific membership plugin developed by American software developer William. A SQL injection vulnerability exists in the code of the membership-simplified-for-oap-members-only/updateDB.php file in WordPress Membership Simplified version 1.58, which...

WordPress membership-simplified-for-oap-members-only plugin arbitrary file download vulnerability

WordPress membership-simplified-for-oap-members-only is a membership plugin developed for WordPress. An arbitrary file download vulnerability exists in the WordPress membership-simplified-for-oap-members-only version 1.58 plugin, which stems from the program failing to detect whether a user is...

WordPress Membership Simplified SQL Injection Vulnerability

WordPress Membership Simplified is a WordPress-specific membership plugin developed by American software developer William. A SQL injection vulnerability exists in the code of the membership-simplified-for-oap-members-only/updateDB.php file in WordPress Membership Simplified version 1.58, which...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002008

Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002010

CVE-2017-1002010 affects the WordPress plugin Membership Simplified (v1.58). The issue is a blind SQL injection in the file membership-simplified-for-oap-members-only/updateDB.php, caused by insufficient sanitization of the input parameter recordId used in delete_media. Public metrics show a high...

CVE-2017-1002009

CVE-2017-1002009 affects the WordPress plugin Membership Simplified v1.58. The vulnerability is in membership-simplified-for-oap-members-only/updateDB.php where unsanitized input via the recordId parameter in the delete function enables blind SQL injection. Impact details are stated as high/sever...

CVE-2017-1002008

CVE-2017-1002008 affects the WordPress plugin membership-simplified-for-oap-members-only v1.58. The vulnerability is in the file download.php, which does not verify that a user is logged in or has download privileges, enabling an attacker to obtain arbitrary files. Public writeups and advisories ...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

WordPress Training Membership 1.0.8 Cross Site Scripting Vulnerability

WordPress Fitness Trainer - Training Membership plugin versions 1.0.8 and below suffer from a cross site scripting vulnerability. Exploit Title: Wordpress Fitness Trainer - Training Membership Plugin ================== 8bitsec - https://twitter.com/8bitsec 0day.today 2018-04-09...

Zomato: [www.zomato.com/dubai/gold] CRITICAL - Allowing arbitrary amount to become a GOLD Member

Hacker was able to find the internal testing Zomato Gold membership. I was able to purchase the PREMIUM GOLD MEMBERSHIP by selecting the amount of our own choice, here it required two conditions first is that you must have a valid premium membership. So, when I looked up the cost of the membershi...

pubs.aaas.org XSS vulnerability

Open Bug Bounty ID: OBB-257060 Description| Value ---|--- Affected Website:| pubs.aaas.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yellowpages.biz.pk XSS vulnerability

Vulnerable URL: http://www.yellowpages.biz.pk/membership.asp?fill=on=38%20=%20=0%20=%20=1"...

Zenbership CMS Version Detection

Detects the installed version of Zenbership CMS. The script sends an HTTP request to the server and attempts to detect the application from the reply. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Country micro cms Membership authentication SQL injection

No description provided by source...

Stored Cross-Site Scripting Vulnerability in FreeCMS Business Edition Frontend Membership Letter Writer

FreeCMS Business Edition is a java open source CMS that provides a mobile app. FreeCMS commercial version of the front-end members to write letters to the location of a stored cross-site scripting vulnerability, the attacker can be sent to any member or administrator by sending malicious script t...