CVE-2016-10966: Improper Limitation of a Pathname to a Restricted Directory

The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload...

PT-2019-7759

Name of the Vulnerable Software and Affected Versions real3d-flipbook-lite plugin version 1.0 for WordPress Description The issue concerns a directory traversal vulnerability in the real3d-flipbook-lite plugin for WordPress, specifically affecting file upload. This is achieved through the bookNam...

CVE-2008-2188: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 bookCopyright and 2 ver parameters to a footer.php, and the 3 bookName, 4 bookMetaTags, and 5 estiloCSS parameters to b header.php...