CVE-2015-9233

The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cpcontactformpp.php and cpcontactformppadminintlist.inc.php...

PT-2017-7562

Name of the Vulnerable Software and Affected Versions cp-contact-form-with-paypal versions prior to 1.1.6 Description The issue concerns SQL injection, which can be exploited through the cp contactformpp id parameter in the cp contactformpp.php file. Recommendations For versions prior to 1.1.6,...

PT-2017-7561

Name of the Vulnerable Software and Affected Versions cp-contact-form-with-paypal versions prior to 1.1.6 Description The issue is related to CSRF with resultant XSS. It is connected to the files cp contactformpp.php and cp contactformpp admin int list.inc.php. Recommendations For versions prior ...

PT-2017-11673

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises from concurrent calls into ioctl RMNET IOCTL ADD MUX CHANNEL in the ipa wan driver, which may lead to memory...

Anblik WordPress image-gallery-with-slideshow SQL Injection Vulnerability

Anblik WordPress image-gallery-with-slideshow is a slideshow plugin for WordPress developed by Anblik Web Design India. A SQL injection vulnerability exists in the image-gallery-with-slideshow/adminsetting.php file in Anblik WordPress image-gallery-with-slideshow version 1.5.2. A remote attacker...

Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability, the vulnerability stems from the program failing t...

CVE-2017-1002012

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

PT-2017-11000

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a stored XSS vulnerability. This vulnerability can be exploited via the gallery name and gallery description variables, allowing attackers with privileges to modify...

PT-2017-11001

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue concerns a lack of input sanitization in the gid variable, which is then used in an SQL statement. This occurs in the admin setting.php file of the image-gallery-with-slideshow...

CVE-2017-1002015: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via selectMulGallery parameter...

PT-2017-11004

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the selectMulGallery parameter in the image-gallery-with-slideshow/admin setting.p...

PT-2017-11003

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue concerns a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the gallery name parameter in the admin setting.php file. Recommendations For version...

CVE-2017-1002014: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...

PT-2017-11002

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection vulnerability. It can be exploited via the imgid parameter in the "image-gallery-with-slideshow/admin setting.php" endpoint. Recommendations F...

CVE-2017-1002011: Improper Neutralization of Input During Web Page Generation

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-galleryname and $value-gallerydescription where anyone with privileges to modify or add galleries/images and inject javascript into the database...

CVE-2017-1002012: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

CVE-2017-1002013: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/adminsetting.php...

CVE-2017-6362

Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors...

CVE-2017-6362: Double Free

Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors...

CVE-2017-5698

Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user...