9008 matches found
WordPress Ninja Forms Plugin <= 2.9.18 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Ninja Forms <= 2.9.18 - Cross-Site Scripting (XSS)
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution Vulnerability
WordPress MailChimp Subscribe Forms plugin version 1.1 suffers from a remote code execution vulnerability. Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/...
WordPress MailChimp Subscribe Forms Plugin 1.1 - Remote Code Execution
MailChimp Subscribe Forms plugin is prone to a remote code execution vulnerability via "email" field. Solution Upgrade the plugin...
WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution
Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/ Software Link: https://downloads.wordpress.org/plugin/mailchimp-subscribe-sm.1.1.zip Version: 1.1 Tested on:...
Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)
A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...
WordPress Custom Contact Forms Plugin <= 5.0.0.1 - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Custom Contact Forms Plugin <= 5.1.0.3 - Database Import/Export
This plugin is prone to a database import/export vulnerabilities. Solution Update the plugin...
WordPress A Forms Plugin <= 1.4.0 - Cross Site Request Forgery
This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...
WordPress A Forms Plugin <= 1.4.0 - SQL Injection
This plugin is prone to a SQL injection vulnerability in a-forms.php aformtrackingpage FunctionMultiple parameters. Solution Update the plugin...
WordPress Custom Contact Forms Plugin <= 5.0.0.1 - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress TDO Mini Forms Plugin <= 0.13.9 - Remote Code Execution
This plugin is prone to a remote code execution in tdomf-upload-inline.php. Solution Update the plugin...
WordPress A Forms Plugin <= 1.4.0 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability via: a-forms.php addfieldtosection function multiple parameter, a-forms.php aforminitialpage function multiple parameter, a-forms.php aformpage function multiple parameter, a-forms.php aformsectionpage Function message parameter,...
WordPress TDO Mini Forms Plugin <= 0.13.9 - Remote Code Execution
This plugin is prone to a remote code execution in tdomf-upload-inline.php. Solution Update the plugin...
WordPress Custom Contact Forms Plugin <= 5.1.0.3 - Database Import/Export
This plugin is prone to a database import/export vulnerabilities. Solution Update the plugin...
CVE-2015-1673
The Windows Forms aka WinForms libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability."...
Privilege escalation
The Windows Forms aka WinForms libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability."...
CVE-2015-1673
CVE-2015-1673 affects the Windows Forms (WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2. It is described as a memory-handling vulnerability in WinForms that, when a crafted partial-trust application is used, allows a user-assisted remote att...
CVE-2015-1673
The Windows Forms aka WinForms libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability."...
Microsoft .NET Framework Privilege Elevation Vulnerability (3057134)
This host is missing an important security update according to Microsoft Bulletin MS15-048. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...