5375 matches found
CVE-2019-14800
The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI...
CVE-2018-20967
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
Cross site request forgery (csrf)
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
CVE-2018-20967
The CVE-2018-20967 issue affects the WordPress plugin wp-ultimate-csv-importer prior to version 5.6.1, which is vulnerable to CSRF. Multiple sources (NVD, Red Hat, CNVD, OpenVAS, WPVulnDB, PT-2019-10403) confirm the affected software and the vulnerability class, with remediation guidance consiste...
CVE-2018-20967
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
WordPress wp-ultimate-csv-importer plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wp-ultimate-csv-importer plugin is used in which a CSV file import/export plugin. A cross-site scripting vulnerability...
August 13, 2019—KB4511553 (OS Build 17763.678)
None None...
Cross site scripting
The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS...
CVE-2015-9306
The CVE-2015-9306 entry concerns the WordPress plugin wp-ultimate-csv-importer; versions prior to 3.8.1 are affected by a Cross-Site Scripting (XSS) vulnerability. The issue arises from inadequate validation of client-side data. Impact is XSS execution within the context of the user’s browser; ex...
osTicket 1.12 - Formula Injection
osTicket 1.12 - Formula Injection Exploit Title: osTicket-v1.12 Formula Injection Vendor Homepage: https://osticket.com/ Software Link: https://osticket.com/download/ Exploit Author: Aishwarya Iyer Contact: https://twitter.com/aish9524 Website: https://about.me/aishiyer Category: webapps CVE:...
osTicket 1.12 - Formula Injection
Exploit Title: osTicket-v1.12 Formula Injection Vendor Homepage: https://osticket.com/ Software Link: https://osticket.com/download/ Exploit Author: Aishwarya Iyer Contact: https://twitter.com/aish9524 Website: https://about.me/aishiyer Category: webapps CVE: CVE-2019-14749 1. Description An issu...
PT-2019-7265 · WordPress · Wp Ultimate Csv Importer
Name of the Vulnerable Software and Affected Versions: wp-ultimate-csv-importer plugin version prior to 3.8.1 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a...
openSUSE Security Update : rmt-server (openSUSE-2019-1824)
This update for rmt-server to version 2.3.1 fixes the following issues : - Fix mirroring logic when errors are encountered bsc1140492 - Refactor RMT::Mirror to download metadata/licenses in parallel - Check repo metadata GPG signatures during mirroring bsc1132690 - Add rmt-server-config subpackag...
osTicket 1.12 Formula Injection
Exploit Title: osTicket-v1.12 Formula Injection Vendor Homepage: https://osticket.com/ Software Link: https://osticket.com/download/ Exploit Author: Aishwarya Iyer Contact: https://twitter.com/aish9524 Website: https://about.me/aishiyer Category: webapps CVE: CVE-2019-14749 1. Description An issu...
TeamPass <= 2.1.27.36 Multiple XSS Vulnerabilities
TeamPass is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
osTicket < 1.10.7, 1.12.x < 1.12.1 Multiple Vulnerabilities
osTicket is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-14683
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acuideleteattachment CSRF...
CVE-2019-14683
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acuideleteattachment CSRF...