5 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-9064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 4.7.5, a Cross Site Request Forgery CSRF vulnerability exists in the filesystem credentials dialog because a nonce is not required for...
WordPress Jobmonster theme < 4.7.5 - Unauthenticated Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Theme Jobmonster versions 4.7.5...
baserCMS 代码问题漏洞
baserCMS is an enterprise-level content management system CMS from the baserCMS team. A code issue vulnerability exists in versions of baserCMS prior to 4.7.5, which stems from a Remote Code Execution RCE vulnerability in the management system of baserCMS...
WordPress Cross-Site Scripting Vulnerability (CNVD-2017-07303)
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress versions prior to 4.7.5, which stems from an error...
Ktools Photostore SQL Injection Vulnerability
Ktools Photostore is the American Ktools company's set of professional photo gallery-like shopping cart software dedicated to selling pictures and other artwork online. A SQL injection vulnerability exists in Ktools Photostore versions prior to 4.7.5. An attacker can exploit this vulnerability to...