7650 matches found
WordPress Easy Appointments plugin <=1.11.7 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found in WordPress Easy Appointments plugin versions =1.11.7. Solution Update the WordPress Easy Appointments plugin to the latest available version at least 1.12.0...
Easy MPEG/AVI/DIVX/WMV/RM To DVD Buffer Overflow
!/usr/bin/python Exploit Title: Easy MPEG/AVI/DIVX/WMV/RM to DVD - 'Enter User Name' Field Buffer Overflow SEH Date: 05-10-2017 Exploit Author: Venkat Rajgor Vendor Homepage: http://www.divxtodvd.net/ Software Link: http://www.divxtodvd.net/easyvideotodvd.exe Tested On: Windows 7 x64 To reproduce...
Design/Logic Flaw
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
CVE-2017-15812
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
CVE-2017-15812
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
CVE-2017-15812
CVE-2017-15812 concerns the WordPress plugin Easy Appointments (before 1.12.0). The vulnerability is a cross-site scripting (XSS) flaw in the admin panel’s Settings values, allowing injection via the settings UI. The issue is evidenced across multiple sources in the connected documents, which con...
CVE-2017-15812
The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel...
PT-2017-14242 · WordPress · Easyappointments
Name of the Vulnerable Software and Affected Versions: Easy Appointments plugin versions prior to 1.12.0 Description: The issue concerns a cross-site scripting XSS flaw. This flaw is located in the Settings values within the admin panel. Recommendations: For versions prior to 1.12.0, update to...
WordPress Easy Contact Form Solution Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Easy Contact Form Solution plugin is one of the contact form creation plugin . A cross-site scripting vulnerability...
Easy Appointments <= 1.11.7 - Cross-Site Scripting (XSS)
The Easy Appointments WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
eicom.easy-shop.ch XSS vulnerability
Open Bug Bounty ID: OBB-335988 Description| Value ---|--- Affected Website:| eicom.easy-shop.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress TR Easy Google Analytics 1.0.0 Cross Site Scripting Vulnerability
WordPress TR Easy Google Analytics plugin version 1.0.0 suffers from a cross site scripting vulnerability. Credit Ricardo Sanchez Vulnerable TR Easy Google Analytics plugin 1.0.0 TR Easy Google Analytics plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently...
WordPress TR Easy Google Analytics 1.0.0 Cross Site Scripting
Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable TR Easy Google Analytics plugin 1.0.0 TR Easy Google Analytics plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thi...
Easy Chat Server User Registeration Buffer Overflow (SEH)
This module exploits a buffer overflow during user registration in Easy Chat Server software. Module Options msf use exploit/windows/http/easychatserver/seh msf undefinedseh show actions ...actions... msf undefinedseh set ACTION msf undefinedseh show options ...show and set options... msf...
CVE-2014-7240
Cross-site scripting XSS vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a masterresponse action to wp-admin/admin-ajax.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a masterresponse action to wp-admin/admin-ajax.php...
CVE-2014-7240
Cross-site scripting XSS vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a masterresponse action to wp-admin/admin-ajax.php...
CVE-2014-7240
CVE-2014-7240 describes an XSS in the WordPress plugin Easy Contact Form Solution (versions prior to 1.7). The vulnerability arises in the master_response action to wp-admin/admin-ajax.php, where an attacker can inject arbitrary script or HTML via the value parameter. Affected component: Easy Con...
easy-trim.co.uk XSS vulnerability
Vulnerable URL: http://www.easy-trim.co.uk/search.php?s=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5858250 VIP website status:| No Coordinated...
Easy Blog PHP Script 1.3a - id SQL Injection
Easy Blog PHP Script 1.3a - id SQL Injection Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection Date: 2017-09-27 Exploit Author: 8bitsec Vendor Homepage: https://www.codester.com/ Software Link: https://www.codester.com/items/4616/easy-blog-php-script Version: 1.3a Tested on: Kali Linux 2....