2664 matches found
Multiple Cross-Site Request Forgery Vulnerabilities in osCMax
osCMax is a PHP-based open source e-commerce system/shopping cart application that supports multi-language, SSL-secured transactions, multiple payment methods, regional shipping conversion, printing invoices and more. Multiple cross-site request forgery vulnerabilities exist in versions of osCMax...
WordPress WP EasyCart Privilege Escalation
Privilege escalation vulnerability in WordPress WP EasyCart plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Threat Outbreak Alert RuleID15095: Email Messages Distributing Malicious Software on May 5, 2015
Medium Alert ID: 38691 First Published: 2015 May 5 20:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15095 may contain the following files: Name | Size ...
WordPress SP Project & Document Manager 2.5.3 SQL Injection
SQL Injection vulnerability in WordPress SP Project & Document Manager plugin pid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
WordPress Cart66 Lite SQL Injection
SQL Injection vulnerability in WordPress Cart66 plugin id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
WordPress Simple Ads Manager File Upload
File upload vulnerability in WordPress Simple Ads Manager plugin sam-ajax-admin.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
WordPress Advanced Video Embed File Disclosure
File disclosure vulnerability in WordPress Advanced Video Embed plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
WordPress 3.5.1 Lightbox Plus RCE
Remote Code Execution in the Wordpress core using maybeunserialize and the simplehtmldomnode class Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
WeBid 1.1.1 File Upload
File upload vulnerability in WeBid ajax.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
WordPress Work The Flow File Upload
File upload vulnerability in WordPress Work The Flow File Upload plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
WordPress CP Multi View Event Calendar 1.1.4 SQL Injection
SQL Injection vulnerability in CP Multi View Event Calendar plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
WordPress NEX-Forms 3.0 SQL Injection
SQL Injection vulnerability in WordPress NEX-Forms plugin nexformsId parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Novell ZENworks Configuration Management UploadServlet File Upload
File upload vulnerability in Novell ZENworks Configuration Management UploadServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Drupal core 7.x SQL Injection
SQL Injection vulnerabilty in the core SQL module of Drupal Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
WordPress UpdraftPlus Credentials Disclosure
Credentials disclosure vulnerability in WordPress UpdraftPlus plugin Vulnerability Type: Unknown For the exploit source code contact DSquare Security sales team...
phpMoAdmin RCE
Remote command execution in phpMoAdmin moadmin.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Piwigo rate parameter SQL Injection
SQL injection vulnerability in include/functionsrate.inc.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
DomPHP <= 0.83 SQL Injection
DomPHP = 0.83 SQL Injection in agenda/indexdate.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...