Lucene search
+L

80 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/29 12:00 a.m.•6 views

CVE-2022-47602: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in JoomUnited WP Table Manager plugin = 3.5.2 versions...

6.5CVSS5.8AI score0.00417EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/29 12:00 a.m.•19 views

PT-2023-15425 · Joomunited · Wp Table Manager

Name of the Vulnerable Software and Affected Versions: JoomUnited WP Table Manager plugin versions prior to 3.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher privileges. There is no...

6.5CVSS5.1AI score0.00417EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2023/01/27 12:00 a.m.•21 views

WP Table Manager < 3.5.3 - Contributor+ Stored XSS

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

6.5CVSS5.2AI score0.00417EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2023/01/27 12:00 a.m.•38 views

WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Broken Access Control

Software WP Table Manager Type Plugin Vulnerable versions = 3.5.2 Fixed in 3.5.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-47601 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID dd961e3e7567 Credits Cat Required privilege...

6.5AI score0.00421EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/01/27 12:00 a.m.•23 views

WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Table Manager Type Plugin Vulnerable versions = 3.5.2 Fixed in 3.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47602 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 400e13da24ca Credits Cat Required...

6.5CVSS5.7AI score0.00417EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/09/12 9:15 p.m.•12 views

CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...

6.1CVSS5.9AI score0.01375EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/09/12 9:15 p.m.•26 views

CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...

6.1CVSS5.9AI score0.01375EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/08/16 12:00 a.m.•16 views

WordPress plugin WP Table Manager has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS5.5AI score0.00421EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/01/31 10:15 p.m.•22 views

CVE-2022-24266

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

7.5CVSS7.2AI score0.05707EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/31 10:15 p.m.•17 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.8CVSS7.2AI score0.06711EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/01/31 10:15 p.m.•14 views

CVE-2022-24266

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

7.8CVSS7.2AI score0.05707EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/01/31 10:15 p.m.•20 views

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

7.5CVSS7.2AI score0.06711EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/31 10:15 p.m.•28 views

Sql injection

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

7.8CVSS7.7AI score0.05707EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/31 12:00 a.m.•8 views

PT-2022-16576

Name of the Vulnerable Software and Affected Versions Cuppa CMS version 1.0 Description A SQL injection issue was found in the /administrator/components/table manager/ endpoint via the order by parameter. This allows for potential exploitation of the system. Recommendations For Cuppa CMS version...

7.8CVSS0.05707EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/01/31 12:00 a.m.•6 views

PT-2022-16574

Name of the Vulnerable Software and Affected Versions Cuppa CMS version 1.0 Description A SQL injection issue was found in the /administrator/components/table manager/ endpoint via the search word parameter. This allows for potential exploitation of the system. Recommendations For Cuppa CMS versi...

7.8CVSS0.06711EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2018/12/31 3:00 p.m.•36 views

CVE-2018-19918

CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...

5.3AI score0.00657EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/09/21 12:00 a.m.•4 views

PT-2018-13977

Name of the Vulnerable Software and Affected Versions CuppaCMS versions prior to 2018-09-03 Description A stored XSS issue exists, allowing exploitation via the section name in the administrator//component/table manager/view/cu menus section. Recommendations For versions prior to 2018-09-03, upda...

4.8CVSS0.00573EPSS
SaveExploits1References3
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•31 views

Wordpress plugin wp-Table <= 1.43 (inc_dir) RFI Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43 incdir Remote File...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2009/07/30 12:00 a.m.•101 views

wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability

=========================================================================================== o wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability Software : wp-Table v1.52 Vendor : http://wordpress.org/ Download : http://wordpress.org/extend/plugins/wp-table/wp-table.zip Author :...

0.6AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/05/01 12:00 a.m.•37 views

WordPress Plugin wp-Table 1.43 - inc_dir Remote File Inclusion

WordPress Plugin wp-Table 1.43 - incdir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43...

0.3AI score
SaveExploits0
Rows per page
Query Builder