Lucene search
+L

130 matches found

OSV
OSV
•added 2023/07/17 3:15 p.m.•15 views

CVE-2023-37968

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

8.8CVSS7.3AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/17 3:15 p.m.•45 views

CVE-2023-37968

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

8.8CVSS0.00248EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/17 3:15 p.m.•28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

6.8CVSS8.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/07/17 2:56 p.m.•53 views

CVE-2023-37968 WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

5.4CVSS9.1AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/17 2:56 p.m.•98 views

CVE-2023-37968

CVE-2023-37968 : Falang multilanguage for WordPress plugin (

8.8CVSS7.2AI score0.00248EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/17 12:00 a.m.•23 views

Falang multilanguage < 1.3.40 - Cross-Site Request Forgery

Description Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

8.8CVSS8.9AI score0.00248EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/17 12:00 a.m.•3 views

CVE-2023-37968: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Faboba Falang multilanguage for WordPress plugin = 1.3.39 versions...

8.8CVSS7.8AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/17 12:00 a.m.•24 views

WordPress plugin Falang multilanguage 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.8AI score0.00248EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/07/12 12:00 a.m.•21 views

WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)

Software Falang multilanguage Type Plugin Vulnerable versions = 1.3.39 Fixed in 1.3.40 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37968 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1920d648ac5e Credits Skalucy...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2021/10/25 12:00 a.m.•17 views

WordPress Falang multilanguage plugin <= 1.3.17 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Falang multilanguage plugin versions = 1.3.17. Solution Update the WordPress Falang multilanguage plugin to the latest available version at least 1.3.18...

2.4AI score
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2020/10/10 12:00 a.m.•11 views

Arbitrary File Deletion Vulnerability in songcms 3.16

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . songcms 3.16 arbitrary file deletion vulnerability , an attacker can use the...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/04/09 12:00 a.m.•66 views

Description of Update Rollup 9 for Microsoft System Center 2012 Operations Manager SP1

Description of Update Rollup 9 for Microsoft System Center 2012 Operations Manager SP1 Introduction This article describes the issues that are fixed in Update Rollup 9 for Microsoft System Center 2012 Operations Manager Service Pack 1 SP1. Additionally, this article contains the installation...

6AI score
SaveExploits0
OSV
OSV
•added 2020/03/12 2:15 p.m.•13 views

CVE-2020-10408

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...

4.8CVSS5.9AI score0.00733EPSS
SaveExploits3References2
Prion
Prion
•added 2018/02/07 9:29 p.m.•19 views

Cross site scripting

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

3.5CVSS5.2AI score0.00543EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2018/02/07 9:29 p.m.•37 views

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

5.4CVSS5.3AI score0.00543EPSS
SaveExploits1References1
OSV
OSV
•added 2018/02/07 9:29 p.m.•15 views

CVE-2018-6796

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

5.4CVSS5.8AI score0.00543EPSS
SaveExploits1References1
CVE
CVE
•added 2018/02/07 9:00 p.m.•55 views

CVE-2018-6796

CVE-2018-6796 affects the PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0. The connected CNVD/CNVD entries describe a Stored XSS vulnerability that can be triggered via arbitrary input fields on user profiles. The root cause is input fields not properly sanitizing or encoding data, allo...

5.4CVSS5.2AI score0.00543EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/07 12:00 a.m.•2 views

CVE-2018-6796: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...

5.4CVSS5.9AI score0.00543EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2018/02/07 12:00 a.m.•31 views

Multilanguage Real Estate MLM Script 3.0 Cross Site Scripting

Exploit Title: Multilanguage Real Estate MLM Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2018/01/31 12:00 a.m.•11 views

PHP Scripts Mall Multilanguage Real Estate MLM Script SQL Injection Vulnerability

Multilanguage Real Estate MLM Script is a set of real estate online sales website scripts. A SQL injection vulnerability exists in PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 and earlier versions. The vulnerability can be exploited by remote attackers to inject SQL commands by sendi...

9.8CVSS8.3AI score0.0305EPSS
SaveExploits2References1
Rows per page
Query Builder