WordPress Plugin Form Maker 1.12.20 - CSV Injection

WordPress Plugin Form Maker 1.12.20 - CSV Injection Exploit Title: Wordpress Plugin Form Maker version 1.12.20 vulnerable to to Formula Injection CSV Injection Google Dork: N/A Date: 27-04-2018 Exploit Author: Jetty Sairam Software Link: https://wordpress.org/plugins/form-maker/ Affected Version:...

WordPress Plugin Form Maker 1.12.20 - CSV Injection

Exploit Title: Wordpress Plugin Form Maker version 1.12.20 vulnerable to to Formula Injection CSV Injection Google Dork: N/A Date: 27-04-2018 Exploit Author: Jetty Sairam Software Link: https://wordpress.org/plugins/form-maker/ Affected Version: 1.12.20 and before Category: Plugins and Extensions...

CVE-2018-10504

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...

Design/Logic Flaw

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...

CVE-2018-10504

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...

CVE-2018-10504

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...

CVE-2018-10504

The CVE-2018-10504 entry concerns the WordPress plugin WebDorado Form Maker by WD, version prior to 1.12.24, which is vulnerable to CSV injection. The root cause is that CSV data exported by the Form Maker form can be crafted to execute commands when opened by a user with sufficient privileges, e...

CVE-2018-10504

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...

CVE-2018-10504: Improper Neutralization of Formula Elements in a CSV File

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...

PT-2018-9925

Name of the Vulnerable Software and Affected Versions: Form Maker by WD plugin versions prior to 1.12.24 Description: The issue allows for CSV injection. Recommendations: For versions prior to 1.12.24, update to version 1.12.24 or later to resolve the issue...

Form Maker, 3.6.14, SQL Injection

Form Maker by Web Dorado, Versions 3.6.14 and previous, SQL Injection resolution: update to 3.6.15 note that previous security release did not completely fix the issue update notice: https://web-dorado.com/products/joomla-form.html...

CVE-2018-5991

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

Sql injection

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

CVE-2018-5991

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

CVE-2018-5991

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

CVE-2018-5991

CVE-2018-5991 is a SQL injection in Joomla! Form Maker (Web Dorado) 3.6.12 and earlier for the view=stats endpoint, exploitable via id, from, or to parameters. The issue affects Form Maker on Joomla!, with references noting a malicious payload via the stats view and public exploits (e.g., Exploit...

Joomla! Form Maker 3.6.12 SQL Injection

Exploit Title: Joomla! Component Form Maker 3.6.12 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://demo.web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/form-maker/ Version: 3.6.12 Category: Webapps Tested on:...

Joomla Form Maker 3.6.12 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Form Maker 3.6.12 - SQL Injection Vendor Homepage: http://demo.web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/form-maker/ Version: 3.6.12 Category:...

CVE-2018-5991: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

PT-2018-17277

Name of the Vulnerable Software and Affected Versions: Joomla! Form Maker version 3.6.12 Description: A SQL Injection issue exists in the Form Maker component for Joomla!, which can be exploited via the id, from, or to parameter in a "view=stats" request. Recommendations: For version 3.6.12, avoi...