Open-source Ticket Request System Unauthorized Access Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

WordPress WP Statistics plugin cross-site scripting vulnerability (CNVD-2019-13247)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WP Statistics plugin is used in one of the site information statistics plugin. A cross-site scripting vulnerability exists in WordPress...

WordPress WP Statistics plugin <= 12.6.3 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress WP Statistics plugin versions = 12.6.3. Solution Update the WordPress WP Statistics plugin to the latest available version at least 12.6.4...

CVE-2019-10864

The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request...

CVE-2019-10864

CVE-2019-10864 affects the WordPress WP Statistics plugin (up to version 12.6.2; referenced in multiple sources up to 12.6.3). The vulnerability is a cross-site scripting (XSS) flaw that allows a remote attacker to inject arbitrary web script or HTML via the Referer header on a GET request. The O...

CVE-2019-10864

The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request...

PT-2019-12062

Name of the Vulnerable Software and Affected Versions WP Statistics plugin versions prior to 12.6.3 Description The issue allows a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request, potentially leading to cross-site scripting XSS attacks. Recommendatio...

CVE-2019-10864: Improper Neutralization of Input During Web Page Generation

The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request...

X (Formerly Twitter): IDOR and statistics leakage in Orders

Description: Twitter on its service "MoPub" statistics dedicated to the results of "Order", after the test shows that the endpoint "https://app.mopub.com/web-client/api/orders/stats/query" is infected with a "IDOR " bug Which led to the leak of private statistics "Orders" by another users Steps T...

XSLeaks attack analysis-HTTP caching and cross-site leakage-vulnerability warning-the black bar safety net

0x1 XSSearch past lives This attack is the earliest can be dated back to 10 years agoi.e. 2009, one named Chris Evans, security personnel describes one of the Yahoo attack: Chris use a malicious web site to search for the site visitor's e-mail Inbox, and he by constructing different keywords mann...

WordPress Plugin WordPress-Feed-Statistics Open Redirect Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in the WordPress plugin WordPress-Feed-Statistics. An attacker can successfully launch a phishing scam and steal user...

WordPress Feed Statistics 4.1 Open Redirection

Exploit Title : WordPress 4.9.2 WordPress-Feed-Statistics Plugins 4.1 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/03/2019 Vendor Homepage : chrisfinke.com Software Download Link :...

CVE-2018-20212

bin/statistics in TWiki 6.0.2 allows cross-site scripting XSS via the webs parameter...

CVE-2018-20212

CVE-2018-20212 affects TWiki 6.0.2, specifically the bin/statistics component, where the webs parameter enables cross-site scripting (XSS). The vulnerability is described as a parameter-based XSS in TWiki/bin/statistics, with CVSS vectors indicating network attack, low to moderate complexity, and...

PT-2019-10017

Name of the Vulnerable Software and Affected Versions: TWiki version 6.0.2 Description: The issue allows cross-site scripting XSS via the webs parameter in the bin/statistics endpoint. Recommendations: For TWiki version 6.0.2, update to a version that fixes this issue to prevent cross-site...

CVE-2018-20212: Improper Neutralization of Input During Web Page Generation

bin/statistics in TWiki 6.0.2 allows cross-site scripting XSS via the webs parameter...

Guizhou statistics release app has override access vulnerability

Guizhou statistics release app is a Bijie area set release of statistical information and participate in the questionnaire survey mobile client. Guizhou Statistics Release app has an override access vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Guizhou statistics release app has arbitrary account login vulnerability

Guizhou statistics release app is a Bijie area set release of statistical information and participate in the questionnaire survey mobile client. Guizhou Statistics Release app has an arbitrary account login vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2019-1667 Cisco HyperFlex Arbitrary Statistics Write Vulnerability

A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by connecting to the...

CVE-2019-1667 Cisco HyperFlex Arbitrary Statistics Write Vulnerability

A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by connecting to the...