72 matches found
CVE-2014-10391: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection...
CVE-2014-10387: Improper Neutralization of Special Elements used in an SQL Command
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection...
CVE-2019-15331: Improper Neutralization of Input During Web Page Generation
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection...
CVE-2014-10389: Improper Authentication
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication...
CVE-2014-10388: Exposure of Sensitive Information to an Unauthorized Actor
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...
WordPress Support Plus Responsive Ticket System Plugin < 9.1.2 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
Cross site scripting
A stored cross-site scripting XSS vulnerability in the submitticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in...
WordPress WP Support Plus Responsive Ticket System plugin <= 9.1.1 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by Christian Angel in WordPress WP Support Plus Responsive Ticket System plugin versions = 9.1.1. Solution Update the WordPress WP Support Plus Responsive Ticket System plugin to the latest available version at least 9.1.2...
CVE-2019-7299
CVE-2019-7299 concerns a stored XSS in the WP Support Plus Responsive Ticket System WordPress plugin, specifically in submit_ticket.php (path: wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php) for version 9.1.1. The vulnerability allows injection of arbi...
CVE-2019-7299: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the submitticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in...
WordPress WP Support Plus Responsive Ticket System SQL Injection
SQL Injection vulnerability in WordPress WP Support Plus Responsive Ticket System plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Pradeep Makone wordpress Support Plus Responsive Ticket System SQL Injection Vulnerability
WordPress is a suite of blogging platforms from the WordPress Software Foundation developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Pradeep Makone wordpress Support Plus Responsive Ticket System is a set of Responsive Ticket System for...
WordPress WP Support Plus Responsive Ticket System plugin <=9.0.2 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities
Multiple Authenticated SQL Injection SQLi vulnerabilities found by 00theway in WordPress WP Support Plus Responsive Ticket System plugin versions =9.0.2. Solution Update the WordPress WP Support Plus Responsive Ticket System plugin to the latest available version at least 9.0.3...
Sql injection
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site,...
CVE-2018-1000131
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site,...
CVE-2018-1000131
The CVE-2018-1000131 entry affects the WordPress plugin WP Support Plus Responsive Ticket System (versions ≤ 9.0.2). The vulnerability is a SQL Injection in the function that retrieves tickets, where the email parameter stored in a cookie is injected, enabling an attacker to manipulate queries. E...
CVE-2018-1000131: Improper Neutralization of Special Elements used in an SQL Command
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site,...
WordPress WP Support Plus Responsive Ticket System plugin <=8.0.7 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability found in WordPress WP Support Plus Responsive Ticket System plugin versions =8.0.7. Solution Update the WordPress WP Support Plus Responsive Ticket System plugin to the latest available version at least version 8.0.8...
WP Support Plus Responsive Ticket System < 8.0.8 - Remote Code Execution (RCE)
WP Support Plus Responsive Ticket System = 8.0.7 allows anyone to upload PHP files with extensions like ".phtml", ".php4", ".php5", and so on, all of which are run as if their extension was ".php" on most hosting platforms. This is because "includes/admin/attachment/uploadAttachment.php" contains...