4677 matches found
CVE-2017-1705: Exposure of Sensitive Information to an Unauthorized Actor
IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visible at first it can be obtained by viewing the page source. IBM X-Force ID: 134427...
CVE-2018-9121
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment...
Hackers spread password stealer malware from YouTube comment section
By Waqas Another day, another malware aiming at Windows devices - This This is a post from HackRead.com Read the original post: Hackers spread password stealer malware from YouTube comment section...
WordPress Subscribe To Comments Reloaded plugin cross-site request forgery vulnerability (CNVD-2018-06862)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Subscribe To Comments Reloaded plugin is used in one of the subscription management plugin. A cross-site request...
WordPress Disable Comments Plugin < 1.0.4 CSRF Vulnerability
The WordPress plugin Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via a request to the...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disablecommentssettings page to wp-admin/options-general.php...
CVE-2014-2274
Cross-site request forgery CSRF vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via a request to the...
CVE-2014-2274
Cross-site request forgery CSRF vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via a request to the...
CVE-2014-2550
Cross-site request forgery CSRF vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disablecommentssettings page to wp-admin/options-general.php...
CVE-2014-2550
The CVE-2014-2550 entry concerns a CSRF vulnerability in the WordPress Disable Comments plugin prior to v1.0.4. The vulnerability allows remote attackers to hijack administrator authentication by issuing requests to the disable_comments_settings page (wp-admin/options-general.php) to enable comme...
CVE-2014-2274
CVE-2014-2274 affects the WordPress plugin “Subscribe To Comments Reloaded” (pre-140219). The vulnerability is a Cross-Site Request Forgery (CSRF) that allows remote attackers to hijack administrator authentication for requests that perform Cross-Site Scripting (XSS) via the subscribe-to-comments...
PT-2018-4201
Name of the Vulnerable Software and Affected Versions Disable Comments plugin versions prior to 1.0.4 for WordPress Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the...
CVE-2014-2274: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via a request to the...
CVE-2014-2550: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disablecommentssettings page to wp-admin/options-general.php...
PT-2018-4193
Name of the Vulnerable Software and Affected Versions Subscribe To Comments Reloaded plugin versions prior to 140219 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attack...
Joomla! SQL Injection Vulnerability (CNVD-2018-06458)
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A SQL injection vulnerability exists in the user comments list view in Joomla!...
SQL Injection Vulnerability in cms js/comments.php File
Search once cms video program is a set of ASP + MSSQL/ACCESS PHP + MYSQL environment to build an intelligent station-building system. Search once cms v1.6 php version of the js/comments.php file there is a sql injection vulnerability, an attacker can use the vulnerability to obtain database...
CVE-2017-18215
xvpng.c in xv 3.10a has memory corruption out-of-bounds write when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value...