13020 matches found
Code injection
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page...
CVE-2018-5289
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page...
CVE-2018-5293
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...
CVE-2018-5291
CVE-2018-5291 affects WordPress GD Rating System plugin v2.3. The vulnerability is a directory traversal flaw in the wp-admin/admin.php panel on the gd-rating-system-tools page, allowing potential reads of arbitrary files (as indicated by CNVD/NVD entries). NVD lists CVSS v3 base score 7.5 (HIGH)...
CVE-2018-5291
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...
Flash Operator Panel v2.31.03 - Command Execution
Document Title: =============== Flash Operator Panel v2.31.03 - Command Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1907 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5694 CVE-ID: ======= CVE-2018-5694 Release Date: =============...
Flash Operator Panel v2.31.03 - Command Execution
Document Title: =============== Flash Operator Panel v2.31.03 - Command Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1907 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5694 CVE-ID: ======= CVE-2018-5694 Release Date: =============...
Code Execution Vulnerability in Pagoda Panel for windows
Pagoda Panel is an easy-to-use, full-featured and free-for-life server management software that supports Linux and Windows. A code execution vulnerability exists in Pagoda Panel for Windows, which is caused due to the program failing to validate the values passed by the user, which can be exploit...
Multiple CPU Hardware CVE-2017-5754 Information Disclosure Vulnerability
Description Multiple CPU Hardware are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Apple Mac Os X 10.11.6 Apple iOS 11.2 Apple macOS 10.12.6 Apple macOS 10.13.2 Apple tvOS...
StivaSoft PHPJabbers PHP Newsletter Script Cross-Site Scripting Vulnerability
StivaSoft PHPJabbers PHP Newsletter Script is a set of news system scripts from the Bulgarian company StivaSoft. admin panel is one of the administration panels. A cross-site scripting vulnerability exists in the lists of the admin panel of StivaSoft PHPJabbers PHP Newsletter Script. A remote...
Fsociety Hacking Tools Pack
Fsociety Menu Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation INSTALL & UPDATE Information Gathering : Nmap Setoolkit Port Scanning Host To IP wordpress user CMS scanner XSStracer Dork – Google Dorks...
CVE-2017-12810
PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...
Cross site scripting
PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...
CVE-2017-12810
PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...
CVE-2017-12810
PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...
CVE-2017-12810
PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...
CVE-2017-12810
Summary (CVE-2017-12810): PHPJabbers PHP Newsletter Script 4.2 contains a stored XSS vulnerability in the admin panel’s lists. Multiple sources (NVD and CNVD) describe a cross-site scripting flaw that allows an attacker to inject arbitrary script when exploiting the vulnerable lists in the admin ...
CVE-2017-17987
PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...
CVE-2017-17941
PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...
PHP Scripts Mall Single Theater Booking Cross-Site Request Forgery Vulnerability
PHP Scripts Mall Single Theater Booking is an open source theater script. A cross-site request forgery vulnerability exists in PHP Scripts Mall Single Theater Booking. A remote attacker can use the admin/sitesettings.php file to change sensitive settings on the user panel, or even inject web scri...