139 matches found
CVE-2013-10023
A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function edcalfilterwhere of the file edcal.php. The manipulation of the argument edcalstartDate/edcalendDate leads to sql injection. The attack c...
Sql injection
A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function edcalfilterwhere of the file edcal.php. The manipulation of the argument edcalstartDate/edcalendDate leads to sql injection. The attack c...
CVE-2013-10023
The CVE-2013-10023 issue affects the WordPress Editorial Calendar Plugin up to version 2.6. The vulnerability is in the edcal_filter_where function in edcal.php, where manipulating the edcal_startDate/edcal_endDate parameters enables an SQL injection. Exploitation can be performed remotely. Upgra...
WordPress Plugin Editorial Calendar SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
PT-2023-10012 · WordPress · Editorial Calendar Plugin
Name of the Vulnerable Software and Affected Versions: Editorial Calendar Plugin versions up to 2.6 Description: A critical issue has been found in the Editorial Calendar Plugin, affecting the function edcal filter where of the file edcal.php. The manipulation of the arguments edcal startDate and...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
Cross site request forgery (csrf)
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
EyouCms 跨站请求伪造漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9, which stems from the discovery of multiple cross-site request forgery CSRF vulnerabilities vi...
CVE-2022-41500
CVE-2022-41500 affects EyouCMS V1.5.9 with multiple CSRF vulnerabilities exposed via the Members Center, Editorial Membership, and Points Recharge components. The CVE’s scoring (CVSS v3.1) is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and user interaction required; impacts span...
PT-2022-25897 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities found in EyouCMS. These vulnerabilities are present in the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
OrchardCore Cross-Site Scripting Vulnerability
OrchardCore is an open source modular and multi-tenant application framework built using ASP.NET Core, and a content management system CMS built on top of the framework. orchardCore 0.0.1 and later, and versions prior to 1.4.0, is vulnerable to a cross-site scripting vulnerability that stems from...
OrchardCore 跨站脚本漏洞
OrchardCore is an open source modular and multi-tenant application framework built using ASP.NET Core, and a content management system CMS built on top of the framework. orchardCore 0.0.1 and later, and versions prior to 1.4.0, is vulnerable to a cross-site scripting vulnerability that stems from...
DEBIAN-CVE-2022-26847
SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...
CVE-2022-26847
SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...
CVE-2022-26847
SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...
CVE-2022-26847
SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...