CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Rapid7 Vulnerability Database (full)•added 2017/09/30 12:00 a.m.•5 views

CVE-2015-9234: Improper Neutralization of Special Elements used in an SQL Command

The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...

7.2CVSS7.1AI score0.02024EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2017/09/30 12:00 a.m.•5 views

CVE-2015-9233: Cross-Site Request Forgery (CSRF)

The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cpcontactformpp.php and cpcontactformppadminintlist.inc.php...

8.8CVSS7.8AI score0.01012EPSS

SaveExploits0References2

Mend•added 2017/09/29 9:00 p.m.•1 views

CVE-2015-9234

The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...

8.6CVSS0.02024EPSS

SaveExploits0References3

Mend•added 2017/09/29 9:00 p.m.•3 views

CVE-2015-9233

8.8CVSS0.01012EPSS

SaveExploits0References3

Cvelist•added 2017/09/29 9:00 p.m.•35 views

CVE-2015-9233

8.8AI score0.01012EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by