CVE-2018-6002

The Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via soundy-background-music\templates\front-end.php warsoundypreview parameter...

CVE-2018-6001: Improper Neutralization of Input During Web Page Generation

The Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy-audio-playlist\templates\front-end.php warsdyplpreview parameter...

PT-2018-17285

Name of the Vulnerable Software and Affected Versions: Soundy Background Music plugin versions 3.9 and below Description: The issue concerns Cross-Site Scripting. It is related to the war soundy preview parameter in the soundy-background-musictemplatesfront-end.php file. Recommendations: For...

PT-2018-17284

Name of the Vulnerable Software and Affected Versions: Soundy Audio Playlist plugin versions 4.6 and below Description: The issue concerns Cross-Site Scripting. It is related to the war sdy pl preview parameter in the soundy-audio-playlisttemplatesfront-end.php file. Recommendations: For versions...

CVE-2018-6002: Improper Neutralization of Input During Web Page Generation

The Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via soundy-background-music\templates\front-end.php warsoundypreview parameter...

CVE-2006-5621

PHP remote file inclusion vulnerability in end.php in askrave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter...

ask_rave 0.9 PR - 'end.php?footfile' Remote File Inclusion

================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip Version : 0.9 PR Dork & vuln : download scripts and think :...