Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/10/16 1:41 a.m.3 views

CVE-2011-10033

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

9.3CVSS8.2AI score0.00152EPSS
Exploits0References1
NVD
NVD
added 2025/10/15 2:15 a.m.4 views

CVE-2011-10033

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

9.3CVSS0.00152EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/15 1:23 a.m.3 views

EUVD-2011-5263

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

9.3CVSS7.7AI score0.00152EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/10/15 1:23 a.m.7 views

CVE-2011-10033 WordPress Plugin is-human <= v1.4.2 Eval Injection RCE

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

9.3CVSS0.00152EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2025/10/15 1:23 a.m.1 views

CVE-2011-10033

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

9.3CVSS6.2AI score0.00152EPSS
Exploits0References5
CVE
CVE
added 2025/10/15 1:23 a.m.7 views

CVE-2011-10033

The CVE-2011-10033 entry concerns WordPress plugin is-human

9.3CVSS7.8AI score0.00152EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/15 1:23 a.m.4 views

CVE-2011-10033 WordPress Plugin is-human <= v1.4.2 Eval Injection RCE

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

9.3CVSS7.8AI score0.00152EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.1 views

WordPress plugin is-human 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.3CVSS7.3AI score0.00152EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.3 views

PT-2025-42214

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

9.3CVSS8.2AI score0.00152EPSS
Exploits0References6
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.25 views

Wordpress Plugin Is-human <= 1.4.2- Remote Command Execution Vulnerability

No description provided by source. Exploit Title: is-human 1.4.2 and prior Worpdress plugin. Date: 16.05.2011 Author: neworder www.neworder-ind.net Software Link: http://wordpress.org/extend/plugins/is-human/ Version: 1.4.2 Tested on: Linux Platform The vulnerability exists in /is-human/engine.ph...

7.1AI score
Exploits0
VulnCheck KEV
VulnCheck KEV
added 2012/03/12 12:0 a.m.0 views

VulnCheck KEV: CVE-2011-10033

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution...

9.3CVSS5.8AI score0.00152EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2011/05/26 12:0 a.m.9 views

WordPress Is-human Plugin <= v1.4.2 'passthru()' Function RCE Vulnerability - Active Check

WordPress Is-human Plugin is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS7.1AI score0.00152EPSS
Exploits0References5
myhack58
myhack58
added 2011/05/20 12:0 a.m.16 views

WordPress plugin Is-human remote command execution vulnerability-vulnerability warning-the black bar safety net

The Is-human wordpress a comment validation plugin. Today in the inj3ct0r saw this plugin vulnerability exp: server/wp-content/plugins/is-human/engine. php? action=log-reset&type=ihoptions;passthruwhoami;error Wherein the passthruwhoamihere you can perform any command, such as ls, uname, etc. But...

0.6AI score
Exploits0
0day.today
0day.today
added 2011/05/17 12:0 a.m.14 views

Wordpress Plugin Is-human <=1.4.2 Remote Command Execution

Exploit for php platform in category web applications Exploit Title: is-human 1.4.2 and prior Worpdress plugin. Date: 16.05.2011 Author: neworder www.neworder-ind.net Software Link: http://wordpress.org/extend/plugins/is-human/ Version: 1.4.2 Tested on: Linux Platform The vulnerability exists in...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2011/05/17 12:0 a.m.20 views

WordPress Plugin Is-human 1.4.2 - Remote Command Execution

WordPress Plugin Is-human 1.4.2 - Remote Command Execution Exploit Title: is-human 1.4.2 and prior Worpdress plugin. Date: 16.05.2011 Author: neworder www.neworder-ind.net Software Link: http://wordpress.org/extend/plugins/is-human/ Version: 1.4.2 Tested on: Linux Platform The vulnerability exist...

0.6AI score
Exploits0
Patchstack
Patchstack
added 2011/05/17 12:0 a.m.7 views

WordPress Is-Human Plugin - Remote Command Execution Vulnerability

The vulnerability exists in /is-human/engine.php. It takes control of the eval function via the "type" parameter, when the "action" is set to log-reset. Solution Point the $ishum-get array variable into $ishum-getih and point it to php stored function errorlog if you want to close the execution...

4AI score
Exploits0References1Affected Software1
Rows per page
Query Builder