Lucene search
K

106 matches found

NVD
NVD
added 2023/07/17 3:15 p.m.10 views

CVE-2023-37968

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

8.8CVSS0.00068EPSS
Exploits0References1
OSV
OSV
added 2023/07/17 3:15 p.m.0 views

CVE-2023-37968

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

8.8CVSS7.3AI score0.00068EPSS
Exploits0References1
Prion
Prion
added 2023/07/17 3:15 p.m.13 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

6.8CVSS8.8AI score0.00068EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/07/17 2:56 p.m.75 views

CVE-2023-37968

CVE-2023-37968 : Falang multilanguage for WordPress plugin (

8.8CVSS7.2AI score0.00068EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/17 2:56 p.m.16 views

CVE-2023-37968 WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

5.4CVSS9.1AI score0.00068EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/07/17 12:0 a.m.2 views

WordPress plugin Falang multilanguage 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.8AI score0.00068EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2023/07/17 12:0 a.m.23 views

Falang multilanguage < 1.3.40 - Cross-Site Request Forgery

Description Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

8.8CVSS8.9AI score0.00068EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2023/07/12 12:0 a.m.11 views

WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)

Software Falang multilanguage Type Plugin Vulnerable versions = 1.3.39 Fixed in 1.3.40 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37968 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1920d648ac5e Credits Skalucy...

8.8CVSS6.6AI score0.00068EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2021/10/25 12:0 a.m.13 views

WordPress Falang multilanguage plugin <= 1.3.17 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Falang multilanguage plugin versions = 1.3.17. Solution Update the WordPress Falang multilanguage plugin to the latest available version at least 1.3.18...

2.4AI score
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/10/10 12:0 a.m.3 views

Arbitrary File Deletion Vulnerability in songcms 3.16

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . songcms 3.16 arbitrary file deletion vulnerability , an attacker can use the...

7.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.52 views

Description of Update Rollup 9 for Microsoft System Center 2012 Operations Manager SP1

Description of Update Rollup 9 for Microsoft System Center 2012 Operations Manager SP1 Introduction This article describes the issues that are fixed in Update Rollup 9 for Microsoft System Center 2012 Operations Manager Service Pack 1 SP1. Additionally, this article contains the installation...

7.7AI score
Exploits0
OSV
OSV
added 2020/03/12 2:15 p.m.0 views

CVE-2020-10408

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...

4.8CVSS5.9AI score0.00321EPSS
Exploits2References2
NVD
NVD
added 2018/02/07 9:29 p.m.10 views

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

5.4CVSS5.3AI score0.00181EPSS
Exploits1References1
OSV
OSV
added 2018/02/07 9:29 p.m.2 views

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

5.4CVSS5.8AI score0.00181EPSS
Exploits1References1
Prion
Prion
added 2018/02/07 9:29 p.m.9 views

Cross site scripting

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

3.5CVSS5.2AI score0.00181EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2018/02/07 9:0 p.m.37 views

CVE-2018-6796

CVE-2018-6796 affects the PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0. The connected CNVD/CNVD entries describe a Stored XSS vulnerability that can be triggered via arbitrary input fields on user profiles. The root cause is input fields not properly sanitizing or encoding data, allo...

5.4CVSS5.2AI score0.00181EPSS
Exploits1References1Affected Software1
Packet Storm
Packet Storm
added 2018/02/07 12:0 a.m.24 views

Multilanguage Real Estate MLM Script 3.0 Cross Site Scripting

Exploit Title: Multilanguage Real Estate MLM Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

7.1AI score
Exploits0
CNVD
CNVD
added 2018/01/31 12:0 a.m.1 views

PHP Scripts Mall Multilanguage Real Estate MLM Script SQL Injection Vulnerability

Multilanguage Real Estate MLM Script is a set of real estate online sales website scripts. A SQL injection vulnerability exists in PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 and earlier versions. The vulnerability can be exploited by remote attackers to inject SQL commands by sendi...

9.8CVSS8.3AI score0.02512EPSS
Exploits1References1
NVD
NVD
added 2018/01/29 5:29 a.m.8 views

CVE-2018-6364

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

9.8CVSS9.9AI score0.02512EPSS
Exploits1References2
OSV
OSV
added 2018/01/29 5:29 a.m.1 views

CVE-2018-6364

SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...

9.8CVSS5.8AI score
Exploits0References2
Rows per page
Query Builder