Lucene search
+L

17 matches found

NVD
NVD
•added 2022/05/23 8:16 a.m.•34 views

CVE-2022-1014

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability...

9.8CVSS0.01583EPSS
SaveExploits2References1
OSV
OSV
•added 2022/05/23 8:16 a.m.•13 views

CVE-2022-1014

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability...

9.8CVSS5.9AI score0.01583EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/05/23 8:16 a.m.•11 views

CVE-2022-1014

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability...

9.8CVSS8AI score0.01583EPSS
SaveExploits2References2
Prion
Prion
•added 2022/05/23 8:16 a.m.•30 views

Sql injection

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability...

7.5CVSS9.7AI score0.01583EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2022/05/23 7:15 a.m.•142 views

CVE-2022-1014

The CVE-2022-1014 issue affects the WP Contacts Manager WordPress plugin (versions up to 2.2.4). Affected component: the plugin’s handling of POST data in SQL statements, due to inadequate sanitization, enabling SQL injection. Exploitation context shown in multiple sources (unauthenticated SQLi d...

9.8CVSS9.9AI score0.01583EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/05/23 7:15 a.m.•47 views

CVE-2022-1014 WP Contacts Manager <= 2.2.4 - Unauthenticated SQLi

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability...

10AI score0.01583EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/23 12:00 a.m.•4 views

CVE-2022-1014: Improper Neutralization of Special Elements used in an SQL Command

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability...

9.8CVSS8.3AI score0.01583EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/05/23 12:00 a.m.•20 views

WordPress plugin WP Contacts Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress prior to WP Meta SEO plugin 4.4.7,...

4.8CVSS5.4AI score0.00605EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/05/23 12:00 a.m.•13 views

WordPress plugin WP Contacts Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress WP Contacts Manager is vulnerable to a SQL injection vulnerability, which...

9.8CVSS5.9AI score0.01583EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/05/23 12:00 a.m.•9 views

PT-2022-13593 · WordPress · Wp Contacts Manager

Name of the Vulnerable Software and Affected Versions: WP Contacts Manager WordPress plugin versions 2.2.4 and earlier Description: The issue arises from the plugin's failure to properly sanitize user-supplied POST data before it is interpolated in an SQL statement and then executed, leading to a...

9.8CVSS9.7AI score0.01583EPSS
SaveExploits2References6
Patchstack
Patchstack
•added 2022/05/02 12:00 a.m.•216 views

WordPress WP Contacts Manager plugin <= 2.2.4 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by cydave in WordPress WP Contacts Manager plugin versions = 2.2.4. Solution Deactivate and delete. This plugin has been closed as of April 20, 2022 and is not available for download. This closure is temporary, pending a full review...

9.8CVSS3.1AI score0.01583EPSS
SaveExploits2References3Affected Software1
wpexploit
wpexploit
•added 2022/05/02 12:00 a.m.•229 views

WP Contacts Manager <= 2.2.4 - Unauthenticated SQLi

The plugin fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability. curl 'http://127.0.0.1:8080/wp-admin/admin-ajax.php?action=WPContactsManagercall&type=get-contact' \ --data '"id":"1\u002...

9.8CVSS1AI score0.01583EPSS
SaveExploits2
HackRead
HackRead
•added 2017/11/24 10:17 p.m.•85 views

“ProtonMail Contacts” world’s first encrypted contacts manager is here

By Waqas The world-renowned encrypted email service provider ProtonMail is back in the This is a post from HackRead.com Read the original post: ProtonMail Contacts worlds first encrypted contacts manager is here...

6.9AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•230 views

IlohaMail Webmail Stored XSS

No description provided by source. !/usr/bin/python ''' Exploit Title: IlohaMail Webmail Stored XSS. Date: 18/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://sourceforge.net/projects/ilohamail/ Software Link:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2012/08/18 12:00 a.m.•24 views

IlohaMail Webmail - Persistent Cross-Site Scripting

IlohaMail Webmail - Persistent Cross-Site Scripting !/usr/bin/python ''' Exploit Title: IlohaMail Webmail Stored XSS. Date: 18/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://sourceforge.net/projects/ilohamail/ Software Link:...

6.8AI score
SaveExploits0
zdt
zdt
•added 2012/08/18 12:00 a.m.•28 views

IlohaMail Webmail Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Exploit Title: IlohaMail Webmail Stored XSS. Date: 18/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://sourceforge.net/projects/ilohamail/ Software Link:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/08/18 12:00 a.m.•39 views

IlohaMail Webmail - Persistent Cross-Site Scripting

!/usr/bin/python ''' Exploit Title: IlohaMail Webmail Stored XSS. Date: 18/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://sourceforge.net/projects/ilohamail/ Software Link: http://sourceforge.net/projects/ilohamail/files/IlohaMail-devel/0.9-20050415/ Version: 0.9-20050415...

5.3AI score
SaveExploits0
Rows per page
Query Builder