415 matches found
CVE-2019-10664: Improper Neutralization of Special Elements used in an SQL Command
Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp...
WordPress Real-Estate-Listing-Realtyna-Wpl 4.3.2 Database Disclosure
Exploit Title : WordPress Real-Estate-Listing-Realtyna-Wpl Plugins 4.3.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : realtyna.com wordpress.org/plugins/real-estate-listing-realtyna-wpl/ Software Download...
Design/Logic Flaw
In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash...
CVE-2018-18206
In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash...
Out-Of-Bounds Write
json-patch is affected by an out-of-bounds write vulnerability. This is due to a lack of index checking of the idx parameter in patch.go, which could allow an attacker to cause a denial of service condition...
WordPress dsIDXpress IDX Plugin Cross Site Scripting Vulnerability
WordPress dsIDXpress IDX Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4521
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2014-4521
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2014-4521
The CVE-2014-4521 entry concerns WordPress: dsIDXpress IDX Plugin, vulnerable component is client-assist.php. The underlying issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML by supplying a crafted action parameter. Affected version appears to be t...
CVE-2014-4521: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
Dsidxpress < 2.1.1 - XSS
Cross-site scripting XSS vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...
SmartCMS (index.php, idx parameter) SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================================================================= o SmartCMS = SQL Injection Vulnerability Software : SmartMS Vendor : http://smartcms.nl/ Author : NoGe Contact :...
CVE-2007-1385: Undefined Security Weakness
chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service crash and heap corruption via a negative or large idx value...
