Lucene search
+L

13183 matches found

OSV
OSV
added 2022/10/11 8:15 p.m.12 views

CVE-2021-36915

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs Profile Builder plugin = 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on...

4.3CVSS5.8AI score0.00266EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/11 8:15 p.m.19 views

CVE-2021-36915

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs Profile Builder plugin = 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on...

4.3CVSS0.00266EPSS
SaveExploits0References2
CVE
CVE
added 2022/10/11 7:33 p.m.77 views

CVE-2021-36915

The CVE-2021-36915 details a CSRF vulnerability in the WordPress Profile Builder plugin (versions

4.3CVSS4.7AI score0.00266EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/11 7:33 p.m.9 views

CVE-2021-36915 WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs Profile Builder plugin = 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on...

4.2CVSS4.6AI score0.00266EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/10/11 7:33 p.m.26 views

CVE-2021-36915 WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs Profile Builder plugin = 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on...

4.2CVSS5.1AI score0.00266EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.15 views

WordPress plugin Profile Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS5AI score0.00266EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.16 views

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress v1.2.1, which was discovered to contain a cross-site scripting XSS vulnerability via the page parameter on /Flatpress/admin.php...

5.4CVSS5.4AI score0.01268EPSS
SaveExploits1References3
OSV
OSV
added 2022/10/07 11:15 a.m.11 views

CVE-2022-40826

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orhaving function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/10/07 11:15 a.m.7 views

CVE-2022-40826

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orhaving function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS7.5AI score0.0096EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 11:15 a.m.6 views

CVE-2022-40833

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherein function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS7.5AI score0.0096EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 11:15 a.m.7 views

CVE-2022-40835

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS7.5AI score0.0096EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 11:15 a.m.7 views

CVE-2022-40829

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orlike function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS7.5AI score0.0096EPSS
SaveExploits1References3
OSV
OSV
added 2022/10/07 11:15 a.m.10 views

CVE-2022-40829

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orlike function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/07 11:15 a.m.11 views

CVE-2022-40828

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherenotin function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/07 11:15 a.m.11 views

CVE-2022-40830

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php wherenotin function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/07 11:15 a.m.12 views

CVE-2022-40832

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php having function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/07 11:15 a.m.12 views

CVE-2022-40831

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php like function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/07 11:15 a.m.10 views

CVE-2022-40825

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php wherein function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/07 11:15 a.m.11 views

CVE-2022-40824

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwhere function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score0.0096EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/10/07 12:00 a.m.17 views

CodeIgniter SQL注入漏洞

CodeIgniter is an open source web framework written in PHP. A SQL injection vulnerability exists in CodeIgniter version 3.1.13 and earlier versions, which stems from a SQL injection problem in the orwherenotin method in the systemdatabaseDBquerybuilder.php location...

9.8CVSS8.5AI score0.0096EPSS
SaveExploits1References3
Rows per page
Query Builder