1906 matches found
CVE-2015-7235
Multiple SQL injection vulnerabilities in dexreservations.php in the CP Reservation Calendar plugin before 1.1.7 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a dexreservationscalendarload2 action or 2 dexitem parameter in a...
PT-2015-7485
Name of the Vulnerable Software and Affected Versions CP Reservation Calendar plugin versions prior to 1.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in a "dex reservations calendar load2" action or the dex item...
CVE-2015-7235: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in dexreservations.php in the CP Reservation Calendar plugin before 1.1.7 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a dexreservationscalendarload2 action or 2 dexitem parameter in a...
WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress: cp-reservation-calendar 1.1.6 SQLi injection Date: 2015-09-15 Google Dork: Index of /wp-content/plugins/cp-reservation-calendar/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link:...
WordPress Plugin CP Reservation Calendar 1.1.6 - SQL Injection
Exploit Title: WordPress: cp-reservation-calendar 1.1.6 SQLi injection Date: 2015-09-15 Google Dork: Index of /wp-content/plugins/cp-reservation-calendar/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link: https://downloads.wordpress.org/plugin/cp-reservation-calendar.z...
WordPress CP Multi View Event Calendar Plugin 1.1.7 - SQL Injection
Exploit Title: WordPress cp-multi-view-calendar.1.1.7 Unauthenticated SQL injection vulnerabilities Date: 2015-07-10 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Vendor Homepage: http://wordpress.dwbooster.com/ Software Link:...
WordPress CP Image Store with Slideshow Plugin <= 1.0.6 - Purchase ID Brute Force Prevention
This plugin is prone to a purchase id brute force prevention vulnerability. Solution Update the plugin...
WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities
WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product...
WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities
Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ Vulnerability...
Wordpress CP Image Store with Slideshow Plugin 1.0.5 Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress CP Image Store with Slideshow 1.0.5 Arbitrary file download vulnerability Date: 2015-07-10 Google Dork: Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com/...
CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities
The CP Contact Form with PayPal WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress Plugin CP Image Store with Slideshow 1.0.5 - Arbitrary File Download
WordPress Plugin CP Image Store with Slideshow 1.0.5 - Arbitrary File Download Exploit Title: WordPress CP Image Store with Slideshow 1.0.5 Arbitrary file download vulnerability Date: 2015-07-10 Google Dork: Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage:...
WordPress Plugin CP Image Store with Slideshow 1.0.5 - Arbitrary File Download
Exploit Title: WordPress CP Image Store with Slideshow 1.0.5 Arbitrary file download vulnerability Date: 2015-07-10 Google Dork: Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com/ Software Link:...
WordPress Plugin CP Multi View Event Calendar 1.1.7 - SQL Injection
Exploit Title: WordPress cp-multi-view-calendar.1.1.7 Unauthenticated SQL injection vulnerabilities Date: 2015-07-10 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage:...
CP Multi View Event Calendar WordPress Plugins 1.1.4 - SQL Injection vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...
WordPress Plugin cp-multi-view-calendar 1.1.4 - SQL Injection
Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com/ Software...
WordPress CP Multi View Event Calendar Plugin <= 1.1.4 - SQL Injection
CP Multi View Event Calendar plugin is prone to an SQL injection vulnerability in "id" and "viewid" parameters. Also, there is a cross-site scripting vulnerability in "weekstartday" parameter. Solution Update the plugin...
WordPress CP Multi-View Calendar Unauthenticated SQL Injection Scanner
This module will scan given instances for an unauthenticated SQL injection within the CP Multi-View Calendar plugin v1.1.4 for Wordpress. Module Options msf use auxiliary/scanner/http/wordpress/cpcalendarsqli msf undefinedcpcalendarsqli show actions ...actions... msf undefinedcpcalendarsqli set...
PT-2014-8799
Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is caused by multiple off-by-one errors in the jpc dec cp setfromcox and jpc dec cp setfromrgn functions. This allows remote attackers to execute arbitrary code via a crafted jp2 file,...