Lucene search
+L

342 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•27 views

Wordpress Easy Contact Forms Export Plugin 1.1.0 Information Disclosure Vulnerability

No description provided by source. Description : Wordpress Plugins - Easy Contact Forms Export Information Disclosure Vulnerability Version : 1.1.0 Link : http://wordpress.org/extend/easy-contact-forms-exporter/ Plugins : http://downloads.wordpress.org/plugin/easy-contact-forms-exporter.zip Date ...

7.1AI score
SaveExploits0
NVD
NVD
•added 2012/08/14 11:55 p.m.•30 views

CVE-2012-2071

Cross-site scripting XSS vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors...

2.1CVSS5.2AI score0.01064EPSS
SaveExploits0References7
Prion
Prion
•added 2012/08/14 11:55 p.m.•29 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors...

2.1CVSS5.6AI score0.01064EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2012/08/14 11:00 p.m.•38 views

CVE-2012-2071

Cross-site scripting XSS vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors...

5.2AI score0.01064EPSS
SaveExploits0References7
CVE
CVE
•added 2012/08/14 11:00 p.m.•70 views

CVE-2012-2071

The CVE-2012-2071 entry affects the Drupal 6.x-1.x Contact Forms module (prior to 6.x-1.13) when the core contact form is enabled. The vulnerability is an XSS flaw that allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML v...

2.1CVSS5.3AI score0.01064EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2012/08/14 12:00 a.m.•2 views

PT-2012-3785

Name of the Vulnerable Software and Affected Versions Drupal Contact Forms module versions 6.x-1.x before 6.x-1.13 Description A cross-site scripting XSS issue exists in the Contact Forms module for Drupal, allowing remote authenticated users with the administer site-wide contact form permission ...

2.1CVSS0.01064EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/14 12:00 a.m.•6 views

CVE-2012-2071: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors...

2.1CVSS6AI score0.01064EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2012/06/08 12:00 a.m.•30 views

WordPress Easy Contact Forms Export 1.1.0 File Disclosure

Description : Wordpress Plugins - Easy Contact Forms Export Information Disclosure Vulnerability Version : 1.1.0 Link : http://wordpress.org/extend/easy-contact-forms-exporter/ Plugins : http://downloads.wordpress.org/plugin/easy-contact-forms-exporter.zip Date : 26-05-2012 Google Dork :...

0.1AI score
SaveExploits0
Patchstack
Patchstack
•added 2012/06/08 12:00 a.m.•11 views

WordPress Easy Contact Forms Export Plugin 1.1.0 - Information Disclosure

WordPress Easy Contact Forms Export plugin is prone to an information disclosure vulnerability. It allows an attacker to obtain sensitive information that may aid in further attacks. Solution Update the plugin...

2.6AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
•added 2012/06/08 12:00 a.m.•24 views

WordPress Plugin Easy Contact Forms Export 1.1.0 - Information Disclosure

WordPress Plugin Easy Contact Forms Export 1.1.0 - Information Disclosure Description : Wordpress Plugins - Easy Contact Forms Export Information Disclosure Vulnerability Version : 1.1.0 Link : http://wordpress.org/extend/easy-contact-forms-exporter/ Plugins :...

7.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/06/08 12:00 a.m.•35 views

WordPress Plugin Easy Contact Forms Export 1.1.0 - Information Disclosure

Description : Wordpress Plugins - Easy Contact Forms Export Information Disclosure Vulnerability Version : 1.1.0 Link : http://wordpress.org/extend/easy-contact-forms-exporter/ Plugins : http://downloads.wordpress.org/plugin/easy-contact-forms-exporter.zip Date : 26-05-2012 Google Dork :...

5.3AI score
SaveExploits0
zdt
zdt
•added 2012/06/07 12:00 a.m.•27 views

ordpress Plugins - Easy Contact Forms Export Information Disclosure Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Easy Contact Forms Export Information Disclosure Vulnerability Version : 1.1.0 Link : http://wordpress.org/extend/easy-contact-forms-exporter/ Plugins :...

7.1AI score
SaveExploits0
NVD
NVD
•added 2012/05/21 8:55 p.m.•31 views

CVE-2012-2340

The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors...

3.5CVSS6.1AI score0.01257EPSS
SaveExploits0References9
Prion
Prion
•added 2012/05/21 8:55 p.m.•24 views

Design/Logic Flaw

The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors...

3.5CVSS6.6AI score0.01257EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2012/05/21 8:00 p.m.•36 views

CVE-2012-2340

The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors...

6.1AI score0.01257EPSS
SaveExploits0References9
CVE
CVE
•added 2012/05/21 8:00 p.m.•58 views

CVE-2012-2340

The CVE-2012-2340 entry applies to the Drupal Contact Forms module (7.x-1.x) prior to 7.x-1.2. The vulnerability arises from permissions not being sufficiently restrictive, allowing remote authenticated users with the 'access the site-wide contact form' permission to modify the module settings vi...

3.5CVSS6.3AI score0.01257EPSS
SaveExploits0References9Affected Software1
Mend
Mend
•added 2012/05/21 8:00 p.m.•1 views

CVE-2012-2340

The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors...

3.5CVSS0.01257EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/05/21 12:00 a.m.•6 views

CVE-2012-2340: Undefined Security Weakness

The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors...

3.5CVSS5.9AI score0.01257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2012/05/21 12:00 a.m.•5 views

PT-2012-3962

Name of the Vulnerable Software and Affected Versions Contact Forms module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users with the access the site-wide contact form permission to modify the module settings. This is due to insufficiently restrictive...

3.5CVSS0.01257EPSS
SaveExploits0References10
Packet Storm
Packet Storm
•added 2012/05/11 12:00 a.m.•40 views

WordPress Custom Contact Forms Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wordpress Security audit Custom Contact Forms 1. Cross-site scripting reflected 1.1. http://127.0.0.1/wp-admin/options-general.php name of an arbitrarily supplied request parameter 1.2. http://127.0.0.1/wp-admin/options-general.php name of an...

SaveExploits0
Rows per page
Query Builder