4217 matches found
CVE-2016-10915: Cross-Site Request Forgery (CSRF)
The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF...
PT-2019-7711
Name of the Vulnerable Software and Affected Versions popup-by-supsystic plugin versions prior to 1.7.9 Description The issue concerns a CSRF problem. Recommendations For versions prior to 1.7.9, update to version 1.7.9 or later to resolve the issue...
PT-2019-13879
Name of the Vulnerable Software and Affected Versions REDCap versions prior to 9.3.0 Description The issue allows for time-based SQL injection in the edit calendar event via the cal id parameter. An attacker can exploit this to obtain a user's login sessionid from the database and then re-login...
Microsoft Windows xxxMNDragOver Null Pointer Dereference Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
WordPress Popup Builder Plugin < 3.45 SQL Injection Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
WordPress Sygnoos Popup Builder Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Sygnoos Popup Builder is one of the popup plugins used in it. A SQL injection vulnerability exists in WordPress Sygnoos Popup Builder...
CVE-2019-14695
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...
CVE-2019-14695
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...
Sql injection
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...
CVE-2019-14695
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...
CVE-2019-14695
Summary : CVE-2019-14695 affects the WordPress plugin Sygnoos Popup Builder, version prior to 3.45. The vulnerability is a SQL injection in com/libs/Table.php caused by mishandling the Subscribers Table ordering. Impact (as described) : A remote attacker could execute arbitrary SQL commands on th...
CVE-2019-14695
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...
PT-2019-13789 · Sygnoos · Sygnoos Popup Builder
Name of the Vulnerable Software and Affected Versions: Sygnoos Popup Builder plugin versions prior to 3.45 Description: A SQL injection issue exists due to the mishandling of Subscribers Table ordering in com/libs/Table.php, allowing a remote attacker to execute arbitrary SQL commands on the...
Popup Builder <= 3.44 - SQL Injection
The Popup Builder – Responsive WordPress Pop up – Subscription & Newsletter WordPress plugin was affected by a SQL Injection security vulnerability...
CVE-2019-14695: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is...
WordPress Popup Builder plugin <= 3.44 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability found by Tin Duong Fortinet FortiGuard Labs in WordPress Popup Builder plugin versions = 3.44. Solution Update the WordPress Popup Builder plugin to the latest available version at least 3.45...
WordPress Plugin Flaws Exploited in Ongoing Malvertising Campaign
A widespread and ongoing malicious advertising campaign is exploiting several recently-disclosed WordPress plugin vulnerabilities to redirect website visitors to booby-trapped landing pages. Researchers at Wordfence said that they recently discovered bad actors injecting code into websites with t...
Eventum Cross-Site Scripting Vulnerability (CNVD-2019-39387)
Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the /htdocs/popup.php file in Eventum version 3.5.0. The vulnerability stems from a lack of proper validation of client-side...
OLX: Reflected XSS on m.olx.co.id via ad_type parameter
I have identified a Reflected Cross Site Scripting XSS vulnerability on the m.olx.co.id website. Vulnerable URL: https://m.olx.co.id/iklan/zundapp-1962-cafe-racer-250-cc-made-in-germany-IDA3GpU.html?adtype=PL"" Steps to replicate is fairly simple. Just access the URL and the JavaScript gets...