CVE-2018-5290

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

CVE-2018-5292

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

WordPress GD Rating System Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.GD Rating System plugin is used in one of the rating plugin. A cross-site scripting vulnerability exists in version...

GD Rating System 2.3 - Multiple Vulnerabilities

The GD Rating System WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

StivaSoft PHPJabbers Star Rating Script Cross-Site Scripting Vulnerability

StivaSoft PHPJabbers Star Rating Script is a set of online rating scripts from StivaSoft Bulgaria. A cross-site scripting vulnerability exists in StivaSoft PHPJabbers Star Rating Script. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via rating entries...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

Cross site scripting

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

Summary of CVE-2017-12811 : PHPJabbers Star Rating Script 4.0 is affected by a stored cross-site scripting (XSS) vulnerability via a rating item. The CVE entry confirms the issue but does not provide explicit exploit details, affected file paths, or versions beyond 4.0 in the description. Connect...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

Rating-Widget: Star Review System <= 2.8.9 - Enable Debugging

The Rating-Widget: Star Review System WordPress plugin was affected by an Enable Debugging security vulnerability...

CVE-2017-6262

NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android ID:...

rating-avto.ru XSS vulnerability

Open Bug Bounty ID: OBB-444572 Description| Value ---|--- Affected Website:| rating-avto.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Identity Governance 12.6 Cross Site Scripting Vulnerability

Exploit for windows platform in category web applications Security Notice for CA Identity Governance CA Technologies support is alerting customers to a potential risk with CA Identity Governance. A vulnerability exists that can potentially allow a malicious actor to conduct cross-site scripting...

Like Button Rating < 2.5.4 - Unauthenticated Arbitrary Blog Settings Change

In the init action, this plugin checked to see if $POST'likebtnimportconfig' is empty. If it’s not empty then it base64-decodes the string, parses it as JSON, and starts changing options. This could allow attackers to change blog settings such as the Site Title. The below form will set the “Site...

Like Button Rating < 2.5.4 - Unauthenticated Arbitrary Blog Settings Change

In the init action, this plugin checked to see if $POST'likebtnimportconfig' is empty. If it’s not empty then it base64-decodes the string, parses it as JSON, and starts changing options. This could allow attackers to change blog settings such as the Site Title. PoC The below form will set the...

RHEL 7 : wget (RHSA-2017:3075)

An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

When an “Outstanding” rating from CNET isn’t enough

The editors at respected tech site CNET/Download.com recently awarded Malwarebytes for Windows with an “outstanding” rating of 4.5 stars out of five. In the review, editor Tom McNamara recommended Malwarebytes because the scanning engine is of “high quality,” it works well with Windows 10, and do...

Escort Marketplace 1.0 - SQL Injection

Escort Marketplace 1.0 - SQL Injection Exploit Title: Escort Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/escort-website Demo: http://escortwebsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...