28 matches found
CVE-2013-2501: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...
WordPress Terillion Reviews Plugin <= 1.1 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the ProfileId field. Solution Update the plugin...
2DayBiz Matrimonial Script SQL Injection & XSS Vulnerabilities
Exploit for php platform in category web applications ============================================================== 2DayBiz Matrimonial Script SQL Injection & XSS Vulnerabilities ==============================================================...
2DayBiz Matrimonial Script - SQL Injection / Cross-Site Scripting
$------------------------------------------------------------------------------------------------------------------- $ 2daybiz Matrimonial Script SQL Injection and Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :...
CVE-2006-1026
JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...
Design/Logic Flaw
JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...