1203 matches found
Findus - Directory Listing < 1.1.15 - Authenticated Persistent XSS
Authenticated Persistent XSS vulnerability was discovered in the «Findus - Directory Listing WordPress Theme», tested version — v1.1.14. Injected payload will trigger in the admin dashboard, in the «My listings» page and on listing page itself. POST /submit-listing/ HTTP/1.1 Host: example.com...
Complaint Management System 4.2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Complaint Management System 4.2 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/complaint-management-sytem/ Version: v4.2 Tested on: Xampp...
Complaint Management System 4.2 - Persistent Cross-Site Scripting
Exploit Title: Complaint Management System 4.2 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/complaint-management-sytem/ Version: v4.2 Tested on: Xampp Credit: İsmail BOZKURT ------ Details: 1- Vulnerable cod...
User Management System 2.0 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: User Management System 2.0 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-pane...
Complaint Management System 4.2 Cross Site Scripting
Exploit Title: Complaint Management System 4.2 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/complaint-management-sytem/ Version: v4.2 Tested on: Xampp Credit: İsmail BOZKURT ------ Details: 1- Vulnerable cod...
User Management System 2.0 - Persistent Cross-Site Scripting
Exploit Title: User Management System 2.0 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Version: v2.0 Tested on: Xampp Credit: İsmail BOZKU...
CVE-2018-18576
The Hustle aka wordpress-popup plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI...
CVE-2018-18576: Improper Limitation of a Pathname to a Restricted Directory
The Hustle aka wordpress-popup plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI...
PT-2020-8636
Name of the Vulnerable Software and Affected Versions: The Hustle plugin versions through 6.0.5 Description: The issue allows Directory Traversal to obtain a directory listing via the "views/admin/dashboard/" URI. Recommendations: For versions through 6.0.5, update to a version later than 6.0.5 t...
fauzantrif eLection Cross-Site Scripting Vulnerability
fauzantrif eLection is a web-based election system. A cross-site scripting vulnerability exists in fauzantrif eLection 2.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9336
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
CVE-2020-9336
CVE-2020-9336 affects fauzantrif eLection 2.0, a web-based election system. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the Admin Dashboard → Settings → Election → 'message if election is closed' field. Root cause: input in that field is not properly sanitized, enabling...
CVE-2020-9336: Improper Neutralization of Input During Web Page Generation
fauzantrif eLection 2.0 has XSS via the Admin Dashboard - Settings - Election - "message if election is closed" field...
PT-2020-20591
Name of the Vulnerable Software and Affected Versions fauzantrif eLection version 2.0 Description The issue concerns a Cross-Site Scripting XSS flaw. It occurs via the Admin Dashboard, specifically in the Settings - Election section, where the "message if election is closed" field is vulnerable...
Video on Admin Dashboard < 1.1.4 - Authenticated Stored XSS
Video on Admin Dashboard is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. PoC A user can insert a simple script in the Widget Title text field, e.g. ". Every specified user role by the plugin will now be targeted by the...
WordPress Videos on Admin Dashboard plugin <= 1.1.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jeroen Mulder in WordPress Videos on Admin Dashboard plugin versions = 1.1.3. Solution Update the WordPress Videos on Admin Dashboard plugin to the latest available version at least 1.1.4...
Video on Admin Dashboard < 1.1.4 - Authenticated Stored XSS
Video on Admin Dashboard is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. A user can insert a simple script in the Widget Title text field, e.g. "alert'XSS';. Every specified user role by the plugin will now be targeted...