22 matches found
CVE-2018-12534
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...
EUVD-2018-4502
Malware in sbrugna...
Quick Chat <= 4.14 - Authenticated Stored Cross-Site Scripting
An Authenticated Persistent XSS vulnerability is present in the the plugin options page /wp-admin/options-general.php?page=quick-chat/quick-chat.php, vulnerable fields: «Chat name prefix for guest users», «Advertisement code for your AdSense». The PoC will be displayed once the issue has been...
Quick Chat <= 4.14 - Unauthenticated Stored Cross-Site Scripting
An Unauthenticated Persistent XSS vulnerability was discovered in the Quick Chat plugin v4.14 for WordPress. PoC The PoC will be displayed once the issue has been remediated...
WordPress Quick Chat plugin <= 4.14 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Ex.Mi in WordPress Quick Chat plugin versions = 4.14. Solution 2020-12-03 - no patched version, only note from WordPress plugin repository "This plugin has been closed as of October 13, 2020 and is not available for download. Th...
Quick Chat <= 4.14 - Authenticated Stored Cross-Site Scripting
An Authenticated Persistent XSS vulnerability is present in the the plugin options page /wp-admin/options-general.php?page=quick-chat/quick-chat.php, vulnerable fields: «Chat name prefix for guest users», «Advertisement code for your AdSense». PoC The PoC will be displayed once the issue has been...
WordPress TechyTalk Quick Chat Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.TechyTalk Quick Chat is an online chat plugin used in it. A SQL injection vulnerability exists in the 'likeescape' function of the...
CVE-2019-1010104
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...
CVE-2019-1010104
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...
CVE-2019-1010104
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...
CVE-2019-1010104
The CVE-2019-1010104 entry concerns the TechyTalk Quick Chat WordPress plugin. A SQL Injection vulnerability exists in the plugin’s Quick-chat.php, specifically where the like_escape function is used (line 399), making the database susceptible to crafted Ajax requests. Multiple connected records ...
CVE-2019-1010104: Improper Neutralization of Special Elements used in an SQL Command
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...
WordPress Quick Chat SQL Injection
SQL Injection vulnerability in WordPress Quick Chat plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Quick Chat SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Quick Chat plugin is used in one of the online chat plugin. A SQL injection vulnerability exists in WordPress Quic...
Sql injection
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...
CVE-2018-12534
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...
CVE-2018-12534
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...
CVE-2018-12534
The CVE-2018-12534 entry describes a SQL injection vulnerability in the WordPress Quick Chat plugin, affecting versions prior to 4.00. Multiple sources (NVD/NVD-affiliates, CNVD) confirm an SQL injection that could allow a remote attacker to execute arbitrary SQL commands, with impact to confiden...