Lucene search
+L

8 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/31 12:00 a.m.•3 views

CVE-2022-4100: Protection Mechanism Failure

The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it possible for an attacker whose IP address has been blocked to bypass this control by setting the...

5.3CVSS5.6AI score0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/10/06 1:22 p.m.•46 views

CVE-2019-17213

The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header...

6.2AI score0.01155EPSS
SaveExploits1References2
Prion
Prion
•added 2014/06/09 7:55 p.m.•21 views

Sql injection

SQL injection vulnerability in the checkEmailFormat function in plugins/jojocore/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /articles/test/...

7.5CVSS9AI score0.02359EPSS
SaveExploits2References3Affected Software1
The Hacker News
The Hacker News
•added 2010/11/27 1:24 a.m.•49 views

IPfucK -- A Proxy tool for Firefox -- New Version

Having your IP address considered as private from a legal point of view, it is always interesting to increase your on-line privacy. Not only to hide your illegal activity indeed for most politicians and anti-fraud organizations, behind each surfers lives, but to just keep your personal informatio...

6.2AI score
SaveExploits0
Prion
Prion
•added 2008/11/18 11:30 a.m.•26 views

Sql injection

SQL injection vulnerability in inc/ajax/ajaxrating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header...

7.5CVSS9.1AI score0.02405EPSS
SaveExploits2References7Affected Software1
Prion
Prion
•added 2008/01/23 2:00 a.m.•24 views

Code injection

stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php...

7.5CVSS7.8AI score0.02318EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/21 12:00 a.m.•4 views

CVE-2006-6684: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long X-Forwarded-For HTTP header. NOTE: The provenance of this information is unknown; the details are obtained...

7.5CVSS6.7AI score0.03005EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2004/04/20 12:00 a.m.•99 views

phpBB 2.0.8a and lower - IP spoofing vulnerability

Advisory Name : phpBB 2.0.8a and lower - IP spoofing vulnerability Release Date : Apr 18, 2004 Application : phpBB Version : phpBB 2.0.8a and previous versions Platform : PHP Vendor URL : http://www.phpbb.com/ Author : Wang / SRR Project Group of Ready Response [email protected] Overview A...

7.3AI score
SaveExploits0
Rows per page
Query Builder