1021 matches found
CVE-2017-1000474: Improper Neutralization of Special Elements used in an SQL Command
Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...
CVE-2018-5652
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodeend parameter...
CVE-2018-5651: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodestart parameter...
CVE-2018-5651
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodestart parameter...
CVE-2018-5652: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodeend parameter...
PT-2018-17050
Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists via the dark mode start parameter in the "wp-admin/profile.php" API endpoint. Recommendations For...
PT-2018-17051
Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists. This is due to the dark mode end parameter in the "wp-admin/profile.php" endpoint. Recommendation...
WordPress Add Link to Facebook Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Add Link to Facebook is one of the plug-ins to automatically add links to Facebook. A cross-site scripting...
CVE-2018-5214
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...
Design/Logic Flaw
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...
CVE-2018-5214
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...
PT-2018-16806
Name of the Vulnerable Software and Affected Versions Add Link to Facebook plugin versions prior to 2.3 Description The issue allows for XSS via the al2fb facebook id parameter to the "wp-admin/profile.php" endpoint. Recommendations For Add Link to Facebook plugin versions prior to 2.3, update to...
CVE-2018-5214: Improper Neutralization of Input During Web Page Generation
The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...
Sql injection
PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...
CVE-2017-17983: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...
PT-2017-15139
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to SQL injection. It affects the view-profile.php file through the mem id parameter. Recommendations At the moment, there is no...
CVE-2017-17615
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...