3634 matches found
Cross site request forgery (csrf)
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
CVE-2019-15832
Affected product: WordPress plugin visitors-traffic-real-time-statistics (pre-1.13). Vulnerability: CSRF in the plugin that can trigger unintended requests from authenticated users. Root cause/impact: described as CSRF with high potential impact on confidentiality, integrity, and availability (CV...
PT-2019-14420
Name of the Vulnerable Software and Affected Versions visitors-traffic-real-time-statistics plugin versions prior to 1.12 Description The issue concerns a CSRF problem in the settings page of the plugin. Recommendations For versions prior to 1.12, update to version 1.12 or later to resolve the...
CVE-2019-15832: Cross-Site Request Forgery (CSRF)
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF...
CVE-2019-15831: Cross-Site Request Forgery (CSRF)
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
PT-2019-14421
Name of the Vulnerable Software and Affected Versions visitors-traffic-real-time-statistics plugin versions prior to 1.13 Description The issue concerns a CSRF problem in the visitors-traffic-real-time-statistics plugin for WordPress. Recommendations For versions prior to 1.13, update to version...
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30373)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...
CVE-2017-18515
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection...
CVE-2017-18515
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection...
Sql injection
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection...
CVE-2017-18515
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection...
CVE-2017-18515
CVE-2017-18515 affects the WordPress WP Statistics plugin prior to version 12.0.8, exposing an SQL injection vulnerability in that plugin (VendorFix remediation). NVD, Red Hat and OpenVAS references document the issue with CVSS/impact details and indicate upgrading to 12.0.8+ as the fix.
Honeywell Experion C300 Controller
Binary data 764916.prm...
Honeywell Experion C300 Controller
Binary data 764917.prm...
PT-2019-8449
Name of the Vulnerable Software and Affected Versions wp-statistics plugin versions prior to 12.0.8 Description The issue is related to SQL injection in the wp-statistics plugin for WordPress. Recommendations For versions prior to 12.0.8, update to version 12.0.8 or later to resolve the issue...
CVE-2017-18515: Improper Neutralization of Special Elements used in an SQL Command
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection...
CVE-2019-14669
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page...
CVE-2019-14669
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page...
PT-2019-13771
Name of the Vulnerable Software and Affected Versions Firefly III version 4.7.17.3 Description The issue arises from the lack of filtration of user-supplied data in the asset account name, leading to stored XSS. This occurs when JavaScript code is executed during a visit to the audit account...
CVE-2019-14669: Improper Neutralization of Input During Web Page Generation
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page...