1906 matches found
Joomla! CP Event Calendar 3.0.1 SQL Injection
Exploit Title: Joomla! Component CP Event Calendar 3.0.1 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/cp-event-calendar/ Version: 3.0.1 Category: Webapps Test...
PT-2018-17533
Name of the Vulnerable Software and Affected Versions Joomla! CP Event Calendar version 3.0.1 Description A SQL Injection issue exists in the CP Event Calendar component for Joomla!. This issue is exploitable via the id parameter in a "task=load" action. Recommendations For version 3.0.1, avoid...
CVE-2018-6398: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
CVE-2018-5376
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecpupload.php op parameter...
PT-2018-2978
Name of the Vulnerable Software and Affected Versions CP 1604 All versions CP 1616 All versions Description A vulnerability has been identified that could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a...
PT-2018-2979
Name of the Vulnerable Software and Affected Versions Siemens CP 1604 versions all Siemens CP 1616 versions all Description The issue is related to a Cross-Site Request Forgery CSRF attack. It may allow a remote attacker to perform actions via the web interface that a legitimate user is allowed t...
PT-2018-2977
Name of the Vulnerable Software and Affected Versions Siemens CP 1604 versions all Siemens CP 1616 versions all Description The issue is related to the lack of authentication for the Telnet service in the Siemens CP communication module software. This could allow a remote attacker to extract data...
PT-2017-7252
Name of the Vulnerable Software and Affected Versions Payment Form for PayPal Pro plugin versions prior to 1.0.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the cp ppp admin int message list.inc.php file. These vulnerabilities are located in the 1 cp...
mybb -- multiple vulnerabilities
myBB Team reports: High risk: Installer RCE on configuration file write High risk: Language file headers RCE Medium risk: Installer XSS Medium risk: Mod CP Edit Profile XSS Low risk: Insufficient moderator permission check in delayed moderation tools Low risk: Announcements HTML filter bypass Low...
Cross site request forgery (csrf)
The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cpcontactformpp.php and cpcontactformppadminintlist.inc.php...
CVE-2015-9234
The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...
CVE-2015-9233: Cross-Site Request Forgery (CSRF)
The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cpcontactformpp.php and cpcontactformppadminintlist.inc.php...
CVE-2015-9234: Improper Neutralization of Special Elements used in an SQL Command
The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...
CVE-2015-9233
The CP Contact Form with PayPal WordPress plugin (pre-1.1.6) is affected by a CSRF vulnerability that can lead to Cross-Site Scripting (XSS), related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php. Affected versions are prior to 1.1.6; updating to 1.1.6 or later is the docume...
CVE-2015-9234
The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...
CVE-2015-9233
The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cpcontactformpp.php and cpcontactformppadminintlist.inc.php...
CVE-2015-9234
The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...
PT-2017-7562
Name of the Vulnerable Software and Affected Versions cp-contact-form-with-paypal versions prior to 1.1.6 Description The issue concerns SQL injection, which can be exploited through the cp contactformpp id parameter in the cp contactformpp.php file. Recommendations For versions prior to 1.1.6,...
PT-2017-7561
Name of the Vulnerable Software and Affected Versions cp-contact-form-with-paypal versions prior to 1.1.6 Description The issue is related to CSRF with resultant XSS. It is connected to the files cp contactformpp.php and cp contactformpp admin int list.inc.php. Recommendations For versions prior ...
