1369 matches found
lumishow.com.br XSS vulnerability
Vulnerable URL: http://www.lumishow.com.br/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 16.09.2015 Latest check for patch:| 16.09.2015 01:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...
h1club.com XSS vulnerability
Vulnerable URL: http://www.h1club.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3260171 Google Pagerank| 3 VIP...
voetzorgnoord.nl XSS vulnerability
Open Bug Bounty ID: OBB-79870 Description| Value ---|--- Affected Website:| voetzorgnoord.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
gorenveincenter.com XSS vulnerability
Vulnerable URL: http://gorenveincenter.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 22.09.2015 Latest check for patch:| 22.09.2015 01:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
colin.se XSS vulnerability
Vulnerable URL: http://colin.se/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1096694 Goog...
tomatesverdes.cl XSS vulnerability
Vulnerable URL: http://tomatesverdes.cl/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 26.09.2015 Latest check for patch:| 26.09.2015 01:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities
WordPress Unite Gallery Lite plugin version 1.4.6 suffers from cross site request forgery and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lit...
Cross site scripting
Cross-site scripting XSS vulnerability in the saveorder function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the items parameter in an fsbsaveorder action to wp-admin/admin-ajax.ph...
Sql injection
Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2mimgsavemapname action to wp-admin/admin-ajax.php and other unspecified vectors...
CVE-2015-4614
Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2mimgsavemapname action to wp-admin/admin-ajax.php and other unspecified vectors...
WeBid 'ajax.php' Arbitrary File Upload Vulnerability
WeBid is an open source auction site building solutions. An arbitrary file upload vulnerability exists in WeBid that stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to upload arbitrary files to an affected computer and execute...
CVE-2015-5151
Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...
WordPress Revslider 4.2.2 XSS / Information Disclosure Vulnerabilities
WordPress Revslider plugin version 4.2.2 suffer from cross site scripting, file download, and information disclosure vulnerabilities. Note that this finding houses site-specific data. | Title : WordPress Revslider 4.2.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork :...
Directory traversal
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a loadtemplate action to wp-admin/admin-ajax.php...
Modoer 2.5 /core/modules/review/ajax.php 本地文件包含漏洞
No description provided by source...
Cross site scripting
Cross-site scripting XSS vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a checkstat action to wp-admin/admin-ajax.php...
Wordpress Theme Nevada Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Theme Nevada Arbitrary File Download Vulnerability Date: 01/05/2015 Exploit Author: X-Line Vendor Homepage: http://themeforest.unitedthemes.com/wpversions/nevada/ Contact : http://www.root-me.org/X-Line-24646 Tested on...
