426 matches found
DRUPAL-CONTRIB-2019-066
This module enables you to have a separate permission only for creating users. The module doesn't respect Drupal's setting for "Who can register accounts?" when set to "Visitors, but administrator approval is required". When this option is chosen, the module overrides the setting, and makes it...
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
Code injection
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...
WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability (CNVD-2019-30099)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...
CVE-2019-15831
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
CVE-2019-15832
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF...
CVE-2019-15831
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
Cross site request forgery (csrf)
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF...
Cross site request forgery (csrf)
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
CVE-2019-15832
Affected product: WordPress plugin visitors-traffic-real-time-statistics (pre-1.13). Vulnerability: CSRF in the plugin that can trigger unintended requests from authenticated users. Root cause/impact: described as CSRF with high potential impact on confidentiality, integrity, and availability (CV...
DEBIAN-CVE-2019-15759
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js...
WordPress visitors-online plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-online is a plugin for website visitor statistics. A cross-site scripting vulnerability exists in the WordPress visitors-onli...
CVE-2017-18537
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...
CVE-2017-18537
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues...