3634 matches found
WordPress WP Statistics Plugin SQL Injection Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress WP Statistics plugin. An attacker can exploit the vulnerability to obta...
WordPress WP Statistics Plugin Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Statistics plugin. An attacker can exploit this vulnerability...
ciderspace.co.uk XSS vulnerability
Vulnerable URL: http://www.ciderspace.co.uk/ASP/statistics/oppositionmeetings.asp?OppositionName=1"...
WP Statistics SQL Injection vulnerability
Security experts at Sucuri have discovered a SQL Injection vulnerability in WP Statistics, one of the most popular WordPress plugins, that is currently installed on over 300,000 websites. The SQL Injection vulnerability in WP Statistics could be exploited by attackers, with at least a subscriber...
WordPress Statistics Cross Site Scripting
A XSS injection vulnerability exists in WordPress Statistics Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary commands on the affected system...
WordPress Statistics Plugin SQL Injection
An SQL injection vulnerability has been reported in WordPress Statistics Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WordPress WP Statistics <= 12.0.7 Authenticated SQLi Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:veronalabs:wpstatistics"; ifdescription...
WordPress WP Statistics plugin <=12.0.7 - Authenticated SQL Injection vulnerability
WordPress WP Statistic plugin in version 12.0.7 and earlier versions vulnerable to Authenticated SQL Injection vulnerability due to lack of sanitization in user-provided data. In this case users even with subscriber rights could use this vulnerability to steal sensitive data. Solution The plugin...
WordPress Plugin Used by 300,000+ Sites Found Vulnerable to SQL Injection Attack
A SQL Injection vulnerability has been discovered in one of the most popular Wordpress plugins, installed on over 300,000 websites, which could be exploited by hackers to steal databases and possibly hijack the affected sites remotely. The flaw has been discovered in the highly popular WP...
WP Statistics <= 12.0.7 - Authenticated SQL Injection
The WP Statistics WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
CVE-2017-9379: Cross-Site Request Forgery (CSRF)
Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameter to core\admin\modules\dashboard\vitals-statistics\404\create-301.php...
PT-2017-18889
Name of the Vulnerable Software and Affected Versions BigTree CMS versions prior to 4.2.19 Description The issue concerns multiple CSRF problems. Specifically, the clear parameter to "core/admin/modules/dashboard/vitals-statistics/404/clear.php" and the from or to parameters to...
ALPINE-CVE-2017-7484
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged...
bxpbet.com XSS vulnerability
Open Bug Bounty ID: OBB-235690 Description| Value ---|--- Affected Website:| bxpbet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2017-3820
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 9.2.21 PostgreSQL versions 9.3.x prior to 9.3.17 PostgreSQL versions 9.4.x prior to 9.4.12 PostgreSQL versions 9.5.x prior to 9.5.7 PostgreSQL versions 9.6.x prior to 9.6.3 Description The issue is related to...
BSA-2017-267
Security Advisory ID : BSA-2017-267 Component : NTP Revision : 1.0: Interim Thecronjobscript bundled withntppackage is intended to perform cleanup on statistics files produced by NTP daemon running with statistics enabled. The script is run as root during the dailycronjobsall operations on...
CVE-2017-2147
Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2136
Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers...
