557 matches found
CVE-2018-20633
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20633
CVE-2018-20633 affects PHP Scripts Mall Advance B2B Script 2.1.4, with a Cross-Site Request Forgery (CSRF) vulnerability exposed via the Edit Profile feature. The connected records consistently identify the vulnerable component as the Advance B2B Script 2.1.4 and describe the issue as CSRF via Ed...
CVE-2018-20632
CVE-2018-20632 concerns PHP Scripts Mall Advance B2B Script 2.1.4. The vulnerability is a stored Cross-Site Scripting (XSS) that can be triggered via the FIRST NAME or LAST NAME fields. The connected documents do not provide exploit details, status, or remediation, and no other affected component...
Advance Gift Shop Pro Script 2.0.3 - SQL Injection
Advance Gift Shop Pro Script 2.0.3 - SQL Injection Exploit Title: Advance Gift Shop Pro Script 2.0.3 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 21, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link :...
CVE-2019-6126
The CVE-2019-6126 entry concerns PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0. The vulnerability is an access-control bypass in the Admin Panel, where remote attackers can bypass restrictions by directly requesting admin/dashboard.php or admin/user.php, leading to disclosure of informa...
[SECURITY] Fedora 27 Update: visualboyadvance-m-2.1.0-2.fc27
VisualBoyAdvance-M is a Nintendo Game Boy Emulator with high compatibility with commercial games. It emulates the Nintendo Game Boy Advance hand held conso le, in addition to the original Game Boy hand held systems and its Super and Co lor variants. VBA-M is a continued development of the now...
CVE-2018-13850
The "Firebase Cloud Messaging FCM + Advance Admin Panel" component supporting Firebase Push Notification on iOS through 2017-10-26 allows SQL injection via the /advancepush/public/login username parameter...
Advance Search for WooCommerce < 1.1 - Multiple XSS
The Advance Search for WooCommerce WordPress plugin was affected by a Multiple XSS security vulnerability...
CVE-2018-11486
An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting XSS vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CS...
Cross site scripting
An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting XSS vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CS...
CVE-2018-11486
Affected product: WordPress MULTIDOTS Advance Search for WooCommerce plugin (versions
activestills.org XSS vulnerability
Open Bug Bounty ID: OBB-615690 Description| Value ---|--- Affected Website:| activestills.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lorenzgroup.com XSS vulnerability
Open Bug Bounty ID: OBB-605732 Description| Value ---|--- Affected Website:| lorenzgroup.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bannerexpress.co.nz XSS vulnerability
Open Bug Bounty ID: OBB-577594 Description| Value ---|--- Affected Website:| bannerexpress.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
eprinter.ca XSS vulnerability
Open Bug Bounty ID: OBB-577589 Description| Value ---|--- Affected Website:| eprinter.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Advance Loan Management System 2.4.2 Database Disclosure
========================================================================================================================================== | Title : Advance Loan Management System Version 2.4.2 database Disclosure Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : Win ...
Advance Loan Management System 1.0 SQL Injection
Exploit Title: Advance Loan Management System - 'id' SQL Injection Date: 2018-01-31 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/advance-loan-management-system-with-savings-system-and-sms-notification/21283070 Version: 1.0 Tested on:...
sccp.ca XSS vulnerability
Open Bug Bounty ID: OBB-456703 Description| Value ---|--- Affected Website:| sccp.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PHP Scripts Mall Advance B2B Script SQL Injection Vulnerability
PHP Scripts Mall Advance B2B Script is a set of PHP-based B2B2 business-to-business transactional website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Advance B2B Script version 2.1.3. A remote attacker can exploit this vulnerability by sending the...
