64 matches found
CVE-2023-23680: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Bob Goetz WP-TopBar plugin = 5.36 versions...
PT-2023-19124 · Bob Goetz · Wp-Topbar
Name of the Vulnerable Software and Affected Versions: Bob Goetz WP-TopBar plugin versions = 5.36 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
SUSE CVE-2016-2228
Cross-site scripting XSS vulnerability in horde/templates/topbar/menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to...
CVE-2023-23824
Auth. SQL Injection SQLi vulnerability in WP-TopBar = 5.36 versions...
Sql injection
Auth. SQL Injection SQLi vulnerability in WP-TopBar = 5.36 versions...
CVE-2023-23824 WordPress WP TopBar Plugin <= 5.36 is vulnerable to SQL Injection
Auth. SQL Injection SQLi vulnerability in WP-TopBar = 5.36 versions...
CVE-2023-23824
CVE-2023-23824 affects the WordPress plugin WP TopBar up to version 5.36 . The vulnerability is an Authenticated SQL Injection caused by improper sanitization/escaping in SQL statements, exploitable by users with administrator privileges (per WPVulnDB PatchStack PT Security). Impact is described ...
CVE-2023-23824 WordPress WP TopBar Plugin <= 5.36 is vulnerable to SQL Injection
Auth. SQL Injection SQLi vulnerability in WP-TopBar = 5.36 versions...
WordPress plugin WP-TopBar SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
PT-2023-19236 · WordPress · Wp-Topbar
Name of the Vulnerable Software and Affected Versions: WP-TopBar versions prior to 5.37 Description: The issue is related to an Authenticated SQL Injection SQLi vulnerability. Recommendations: For WP-TopBar versions prior to 5.37, update to version 5.37 or later to resolve the issue...
CVE-2023-23824: Improper Neutralization of Special Elements used in an SQL Command
Auth. SQL Injection SQLi vulnerability in WP-TopBar = 5.36 versions...
WP TopBar <= 5.36 - Admin+ SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...
WordPress WP TopBar Plugin <= 5.36 is vulnerable to SQL Injection
Software WP TopBar Type Plugin Vulnerable versions = 5.36 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-23824 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID 21a34ec67731 Credits thiennv Required privilege Administrator Published 19...
WordPress WP TopBar Plugin <= 5.36 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP TopBar Type Plugin Vulnerable versions = 5.36 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23680 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8dbf0877dfd7 Credits thiennv Required privilege...
PT-2020-18479 · Mitre · Mitreid Connect
Name of the Vulnerable Software and Affected Versions: MITREid Connect versions 1.3.3 and earlier Description: The issue allows for XSS due to userInfoJson being included in the page unsanitized, related to header.tag. This can be exploited to execute arbitrary JavaScript. The user's name is...
DEBIAN-CVE-2016-2228
Cross-site scripting XSS vulnerability in horde/templates/topbar/menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to...
UBUNTU-CVE-2016-2228
Cross-site scripting XSS vulnerability in horde/templates/topbar/menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to...
WordPress WP TopBar Plugin <= 3.04 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in ZeroClipboard.swf. Solution Update the plugin...