163 matches found
Server side request forgery (ssrf)
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF...
CVE-2020-28978
CVE-2020-28978 affects WordPress Canto Plugin 1.3.0, with a blind SSRF due to lack of validation of the subdomain parameter in several endpoints (e.g., includes/lib/tree.php?subdomain=). Unauthenticated attackers can make requests to internal or external servers via the subdomain parameter. The C...
CVE-2020-28978
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF...
CVE-2020-28977
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF...
CVE-2020-28977
The CVE-2020-28977 entry corresponds to the WordPress Canto plugin vulnerability (version 1.3.0). It is a blind Server-Side Request Forgery (SSRF) flaw that allows an unauthenticated attacker to cause requests to internal or external servers by supplying a malicious subdomain parameter in the plu...
CVE-2020-28976
The CVE-2020-28976 entry relates to WordPress Canto plugin 1.3.0, which is vulnerable to blind Server-Side Request Forgery. The flaw allows an unauthenticated attacker to cause requests to arbitrary internal/external hosts via the subdomain parameter in endpoints such as includes/lib/detail.php?s...
CVE-2020-28976
The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF...
Canto <= 1.7.0 - Unauthenticated Blind SSRF
The plugin is affected by Blind SSRF issues via the domain parameter in three files: /includes/lib/tree.php, /includes/lib/detail.php and /includes/lib/get.php. All requests to the arbitrary domain/IP will be made with the HTTPS protocol PoC The PoC will be displayed once the issue has been...
Canto <= 1.7.0 - Unauthenticated Blind SSRF
The plugin is affected by Blind SSRF issues via the domain parameter in three files: /includes/lib/tree.php, /includes/lib/detail.php and /includes/lib/get.php. All requests to the arbitrary domain/IP will be made with the HTTPS protocol The PoC will be displayed once the issue has been remediate...
WordPress Canto plugin 代码问题漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A server-side request forgery vulnerability exists in WordPress Canto plugin 1.3.0. An attacker can...
WordPress Canto plugin 代码问题漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A server-side request forgery vulnerability exists in WordPress Canto plugin 1.3.0. An attacker can...
WordPress Canto plugin 代码问题漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A server-side request forgery vulnerability exists in WordPress Canto plugin 1.3.0. An attacker can...
WordPress Canto plugin server-side request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. uninstall is one of the plugins used to completely uninstall WordPress. A server-side request forgery vulnerability exists in the...
CVE-2020-24063
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...
CVE-2020-24063
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...
Server side request forgery (ssrf)
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...
CVE-2020-24063
The CVE-2020-24063 entry concerns the WordPress Canto plugin (version 1.3.0) with a server-side request forgery (SSRF) flaw in includes/lib/download.php?subdomain=. The vulnerability allows an attacker to access internal resources, as described in various sources. The NVD/CVSS data indicates a hi...
CVE-2020-24063
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...
SQL Injection Vulnerability in MagazineCantoRequest.aspx of Beijing Jinpan Software Technology Co.
Beijing Jinpan Software Technology Co., Ltd. Jinpan collection query system is a digital library as the framework for building a new type of large-scale system adapted to the operation mechanism of digital libraries. The product MagazineCantoRequest.aspx SQL injection vulnerability exists, the...