PT-2019-7108

Name of the Vulnerable Software and Affected Versions Conversador plugin versions 2.61 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the page parameter. This can lead to the execution of malicious code on the client-side...

CVE-2014-4519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter...

SQL injection vulnerability in the b*** parameter of the zzzphp sa***.php page

zzphp is a PHP and MYSQL based CMS, free open source building system. zzzphp sa.php page b parameters exist SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the ge*** page po*** parameter of the UCLE Intelligent Education Cloud Platform

Mingbo Education Technology Co., Ltd. is a company that provides quality products, services and solutions for smart education in the field of primary and secondary schools K12. There is a SQL injection vulnerability in the ge page po parameter of the UCL Smart Education Cloud Platform, which can ...

SQL Injection Vulnerability in YU***_us*** Parameter of Yunye CMS in***.php Page

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS in.php page YUus parameter there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

CVE-2019-18951

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files...

SQL injection vulnerability in the pi***.asp page parameter of Enterprise First's website building system ma***.asp

Enterprise First website builder is a free website builder system provided by Enterprise First. SQL injection vulnerability exists in the ma.asp page pi parameter of the Enterprise First website building system, which can be exploited by an attacker to obtain sensitive information from the databa...

CVE-2015-9468

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

CVE-2015-9468: Improper Neutralization of Input During Web Page Generation

The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action...

PT-2019-7427

Name of the Vulnerable Software and Affected Versions broken-link-manager plugin version 0.4.5 Description The issue concerns a cross-site scripting XSS flaw. It is triggered via the page parameter in a delURL action. Recommendations For version 0.4.5, consider disabling the delURL action until a...

S-CMS e-commerce system aj***.php page st*** parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page st parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

CVE-2016-10984: Improper Neutralization of Input During Web Page Generation

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

CVE-2016-10952

The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter...

CVE-2017-18613

The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter...

CVE-2016-10952: Improper Neutralization of Input During Web Page Generation

The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter...

PT-2019-8544

Name of the Vulnerable Software and Affected Versions trust-form plugin version 2.0 Description The issue concerns a problem with the trust-form plugin for WordPress, where there is a potential for XSS via the "page" parameter in the wp-admin/admin.php page, specifically when editing trust forms...

CVE-2017-18603

The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postmanemaillog page parameter...

PT-2019-8534

Name of the Vulnerable Software and Affected Versions postman-smtp plugin through 2017-10-04 for WordPress Description The issue concerns a cross-site scripting XSS problem. It is exploited via the page parameter in the "wp-admin/tools.php" page, specifically when accessing the postman email log...