CVE-2017-1002026

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function editeventcategory does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement...

WordPress Event Espresso Lite plugin <=3.1.37.11.L - Blind SQL Injection vulnerability

Blind SQL Injection vulnerability found by Larry W. Cashdollar in the WordPress Event Espresso Lite – Event Management and Registration System plugin version 3.1.37.11.L and earlier versions. The function editeventcategory does not sanitize user-supplied input via the $id parameter before passing...

Event Espresso Lite <= 3.1.37.11.L - Authenticates Blind SQL Injection

The Event Espresso Lite - Event Management and Registration System WordPress plugin was affected by an Authenticates Blind SQL Injection security vulnerability...

espresso.repubblica.it XSS vulnerability

Open Bug Bounty ID: OBB-239262 Description| Value ---|--- Affected Website:| espresso.repubblica.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site scripting vulnerability in wordpress plugin event-espresso-decaf

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. The Wordpress plugin event-espresso-decaf is vulnerable to an xss...

central.espresso.co.uk Open Redirect vulnerability

Vulnerable URL: http://central.espresso.co.uk/redirect.pl?url=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

The Economist Espresso - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Economist Espresso published at the 'play' market has multiple vulnerabilities...