CVE-2018-15818

CMS/plugin: Repute ARForms 3.5.1 and earlier. A vulnerability allows an attacker to delete arbitrary files on the server by sending a malicious request to admin-ajax.php, abusing web server privileges. Affected component is the plugin’s admin AJAX endpoint; impact is file deletion with partial in...

CVE-2018-15818: Improper Input Validation

An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php...

PT-2019-9189

Name of the Vulnerable Software and Affected Versions Repute ARForms versions 3.5.1 and prior Description An issue allows an attacker to delete any file on the server with web server privileges by sending a malicious request to "admin-ajax.php". Recommendations For versions 3.5.1 and prior, updat...

PT-2019-9830

Name of the Vulnerable Software and Affected Versions WP-jobhunt plugin versions prior to 2.4 Description The issue concerns the lack of control over AJAX requests sent to the cs employer ajax profile function through the "admin-ajax.php" file. This allows remote unauthenticated attackers to...

PT-2019-9831

Name of the Vulnerable Software and Affected Versions WP-jobhunt plugin versions prior to 2.4 Description The issue concerns the lack of control over AJAX requests sent to the cs reset pass function through the "admin-ajax.php" file. This allows remote unauthenticated attackers to reset the...

CVE-2018-19487: Exposure of Sensitive Information to an Unauthorized Actor

The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the csemployerajaxprofile function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users...

CVE-2019-9040

S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332...

CVE-2019-9040: Cross-Site Request Forgery (CSRF)

S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332...

PT-2019-19329

Name of the Vulnerable Software and Affected Versions S-CMS PHP version 3.0 Description The issue allows for a CSRF attack to add a new admin user via the "admin/ajax.php?type=admin&action=add" API endpoint. Recommendations For S-CMS PHP version 3.0, consider disabling access to the...

Cross site request forgery (csrf)

MapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery CSRF vulnerability in REST endpoint /wp-admin/admin-ajax.php?action=mapsvgsave that can result in an attacker can modify post data, including embedding javascript. This attack appears to be exploitable via the victim must be...

CVE-2019-1000003

MapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery CSRF vulnerability in REST endpoint /wp-admin/admin-ajax.php?action=mapsvgsave that can result in an attacker can modify post data, including embedding javascript. This attack appears to be exploitable via the victim must be...

CVE-2019-1000003

MapSVG Lite 3.2.3 is affected by a CSRF in the mapsvg_save AJAX endpoint (/wp-admin/admin-ajax.php?action=mapsvg_save) that can allow an authenticated admin to modify post data (including embedded JavaScript). Exploitation requires the attacker to have an admin account and to entice the admin to ...

PT-2019-11257

Name of the Vulnerable Software and Affected Versions: MapSVG Lite versions prior to 3.3.0 Description: The issue allows an attacker to modify post data, including embedding javascript, due to a Cross Site Request Forgery CSRF vulnerability in the REST endpoint...

CVE-2019-1000003: Cross-Site Request Forgery (CSRF)

MapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery CSRF vulnerability in REST endpoint /wp-admin/admin-ajax.php?action=mapsvgsave that can result in an attacker can modify post data, including embedding javascript. This attack appears to be exploitable via the victim must be...

CVE-2018-19042

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dirfrom and dirto parameters of an mrelocatormove action to the wp-admin/admin-ajax.php URI...

PT-2019-9723

Name of the Vulnerable Software and Affected Versions Media File Manager plugin version 1.4.2 Description The issue allows for arbitrary file movement through a ../ directory traversal in the dir from and dir to parameters of an mrelocator move action to the "wp-admin/admin-ajax.php" URI...

PT-2019-9722

Name of the Vulnerable Software and Affected Versions Media File Manager plugin version 1.4.2 Description The issue allows for XSS via the dir parameter of an mrelocator getdir action to the "wp-admin/admin-ajax.php" API endpoint. Recommendations For Media File Manager plugin version 1.4.2, avoid...

PT-2019-9721

Name of the Vulnerable Software and Affected Versions Media File Manager plugin version 1.4.2 Description The issue allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator getdir action to the "wp-admin/admin-ajax.php" URI. Recommendations For Media File Manag...

CVE-2018-19041: Improper Neutralization of Input During Web Page Generation

The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocatorgetdir action to the wp-admin/admin-ajax.php URI...

CVE-2018-19040: Improper Limitation of a Pathname to a Restricted Directory

The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocatorgetdir action to the wp-admin/admin-ajax.php URI...