3078 matches found
PrestaShop Responsive Mega Menu Pro Module SQL Injection Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop. The solution provides a variety of payment methods , short message alerts and product image scaling and other features.Attribute Wizard addon is one of the product attribute add module.Responsive Mega Menu...
Sql injection
modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute a SQL Injection through function calls in the code parameter...
CVE-2018-8824
modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute a SQL Injection through function calls in the code parameter...
CVE-2018-8824
The vulnerability CVE-2018-8824 affects the PrestaShop Responsive Mega Menu Pro module version 1.0.32 (for PrestaShop 1.5.5.0–1.7.2.5). The issue is a SQL injection in modules/bamegamenu/ajax_phpcode.php exposed via the code parameter, reported across multiple sources (NVD, CNVD, OSV, OpenVAS) as...
CVE-2018-8824: Improper Neutralization of Special Elements used in an SQL Command
modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute a SQL Injection through function calls in the code parameter...
PT-2018-18646
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.5.5.0 through 1.7.2.5 Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module version 1.0.32 Description The issue allows remote attackers to execute a SQL Injection through function calls in the code parameter of th...
WordPress Responsive Cookie Consent plugin <=1.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found in WordPress Responsive Cookie Consent plugin versions =1.7. Solution Update the WordPress Responsive Cookie Consent plugin to the latest available version at least 1.8...
CVE-2018-10309
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS...
CVE-2018-10309
The CVE-2018-10309 entry describes an XSS in the WordPress plugin Responsive Cookie Consent prior to version 1.8. Concrete details from connected sources show the vulnerability stems from mishandling numeric fields, allowing injected HTML/Script to execute in a victim’s browser when visiting the ...
CVE-2018-10309: Improper Neutralization of Input During Web Page Generation
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS...
PT-2018-9816
Name of the Vulnerable Software and Affected Versions: Responsive Cookie Consent plugin versions prior to 1.8 Description: The issue is related to the mishandling of number fields, which leads to a potential XSS problem. Recommendations: For versions prior to 1.8, update to version 1.8 or later t...
VX Search 10.6.18 - directory Local Buffer Overflow
VX Search 10.6.18 - directory Local Buffer Overflow !/usr/bin/python Title: VX Search 10.6.18 Local Buffer Overflow Author: Kevin McGuigan Twitter: @h3xagram Author Website: https://www.7elements.co.uk Vendor Website: http://www.vxsearch.com Version: 10.6.18 Date: 18/04/2018 Tested on: Windows 7...
Arbitrary Code Execution Vulnerability in the HTML5 Responsive Website Building System of Huizhou Fire Phoenix Network Technology Co.
Huizhou Fire Phoenix Network Technology Co., Ltd. provides one-stop website production, website promotion, APP development, WeChat development, data analysis, software development, dynamic creative, cell phone website, Taobao store permanent code decoration, FLASH animation, to program developmen...
CVE-2018-8823
modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter...
CVE-2018-8823: Improper Control of Generation of Code
modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter...
PT-2018-18645
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.5.5.0 through 1.7.2.5 Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module version 1.0.32 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the code parameter in the...
StaCoAn - Crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credentials API keys URL's of API's Decryption keys Major coding...
CVE-2018-1000131
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site,...
CVE-2018-1000131: Improper Neutralization of Special Elements used in an SQL Command
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site,...
PT-2018-9306
Name of the Vulnerable Software and Affected Versions: Support Plus Responsive Ticket System versions 9.0.2 and earlier Description: The issue concerns a SQL Injection vulnerability in the function to get tickets. The email parameter in the cookie was found to be injectable, allowing for the...