105 matches found
CVE-2015-1000004
XSS in filedownload v1.4 wordpress plugin...
CVE-2015-1000003
Blind SQL Injection in filedownload v1.4 wordpress plugin...
Cross site scripting
XSS in filedownload v1.4 wordpress plugin...
Open redirect
Open Proxy in filedownload v1.4 wordpress plugin...
CVE-2015-1000002
Open Proxy in filedownload v1.4 wordpress plugin...
CVE-2015-1000004
XSS in filedownload v1.4 wordpress plugin...
CVE-2015-1000003
Blind SQL Injection in filedownload v1.4 wordpress plugin...
CVE-2015-1000002
The CVE-2015-1000002 entry concerns the WordPress FileDownload plugin (version 1.4). Connected sources indicate multiple issues tied to FileDownload
CVE-2015-1000004
CVE-2015-1000004 records an XSS vulnerability in the WordPress plugin “filedownload” v1.4. The connected documents substantiate the affected product (WordPress filedownload plugin) and the vulnerability class (XSS) but do not provide concrete technical specifics such as vulnerable files, root cau...
CVE-2015-1000003
CVE-2015-1000003 describes a Blind SQL Injection in the WordPress plugin filedownload v1.4 . Multiple connected sources confirm that the vulnerability exists in this plugin version and is of the SQL injection type, impacting WordPress environments hosting this plugin. The NVD entry provides a hig...
PT-2016-3570
Name of the Vulnerable Software and Affected Versions filedownload wordpress plugin version 1.4 Description The issue is related to an Open Proxy in the filedownload wordpress plugin. Recommendations For filedownload wordpress plugin version 1.4, update to a newer version that contains a fix for...
CVE-2015-1000002: Improper Input Validation
Open Proxy in filedownload v1.4 wordpress plugin...
PT-2016-3571
Name of the Vulnerable Software and Affected Versions filedownload version 1.4 Description The issue is related to a Blind SQL Injection in the filedownload WordPress plugin. Recommendations For version 1.4, update to a newer version that contains a fix for this issue, if available. At the moment...
CVE-2015-1000003: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL Injection in filedownload v1.4 wordpress plugin...
CVE-2015-1000004: Improper Neutralization of Input During Web Page Generation
XSS in filedownload v1.4 wordpress plugin...
PT-2016-3572
Name of the Vulnerable Software and Affected Versions filedownload wordpress plugin version 1.4 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For filedownload wordpress plugin version 1.4, update to a newer version that contains a fix for this issue...
WordPress Filedownload Plugin 0.1 arbitrary File Download
No description provided by source...
ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal
ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal Exploit Title: ManageEngine ServiceDesk Plus Product Description ------------------- ServiceDesk Plus is an ITIL ready IT help desk software for organizations of all sizes. With advanced ITSM functionality and easy-to-use...
WordPress Filedownload 1.4 Open Proxy
Title: Open Proxy in filedownload v1.4 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-11 Download Site: https://wordpress.org/plugins/filedownload/ Vendor: Peter Gross Vendor Notified: 2015-07-11 Vendor Contact: [email protected] Description: Creates a downloadlink with t...