All Vulnerabilities for izito.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| izito.com ---|--- Open Bug Bounty...

WordPress pagination plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pagination is a custom pagination plugin used in it. A cross-site scripting vulnerability exists in the WordPress pagination plugi...

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

Cross site scripting

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

CVE-2017-18527

CVE-2017-18527 affects the WordPress Pagination plugin by BestWebSoft (versions

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

Kanboard < 1.2.8 XSS Vulnerability

Kanboard is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:kanboard:kanboard"...

Code injection

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

CVE-2019-7324

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

CVE-2019-7324

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

CVE-2019-7324

CVE-2019-7324 affects Kanboard (pre-1.2.8). The issue is an XSS in the pagination sorting logic within app/Core/Paginator.php. Public data from multiple sources confirms the vulnerability exists in Kanboard up to version 1.2.7 and was addressed in Kanboard 1.2.8 with a release/commit cited in ref...

CVE-2019-7324

app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting...

Cross-site Scripting (XSS) Through Generated Pagination Links

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

FreeBSD : Serendipity -- multiple vulnerabilities (01018916-c47c-11e8-8b07-00e04c1ea73d)

Serendipity reports : Security: Fix XSS for pagination, when multi-category selection is used. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistributi...

Serendipity -- multiple vulnerabilities

Serendipity reports: Security: Fix XSS for pagination, when multi-category selection is used...

Hanno's projects: Reflected xss in Serendipity's /index.php

Summary: There exists a reflected xss threat in https://blog.fuzzing-project.org/index.php?frontpage. Description: By setting the serendipity%5bmultiCat%5d%5b%5d POST input to 1'"&%prompt1 I'm able to trigger a JavaScript prompt box in versions of IE up to and including IE 11. Steps To Reproduce:...

WordPress Pie Register Plugin < 3.0.9 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title: WordPress Plugin Pie Register order = escsql $order ; IV. PROOF OF CONCEPT The following URL have been confirmed to all suffer from Time Based SQL Injection. GET...

WordPress Ajax Pagination (twitter Style) plugin path traversal vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers set up a personal blog site . Ajax Pagination twitter Style plugin is used in one of the paging plugin . A path traversal vulnerability exist...

CVE-2014-2674

Directory traversal vulnerability in the Ajax Pagination twitter Style plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the loop parameter in an ajaxnavigation action to wp-admin/admin-ajax.php...