CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

EUVD-2017-9727

Malware in sbrugna...

EUVD-2017-9728

Malware in sbrugna...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

WordPress kama-clic-counter plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. kama-clic-counter is a plugin that uses the page download feature in it. A SQL injection vulnerability exists in version 3.4.9 of the...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

Sql injection

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

Cross site scripting

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18615

The CVE-2017-18615 entry concerns the Kama Click Counter WordPress plugin, specifically versions prior to 3.5.0, which is affected by a cross-site scripting (XSS) vulnerability. The vulnerability is documented across multiple sources (NVD, RH, Red Hat, WPVulndb, CVE list) with consistent wording ...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18614

CVE-2017-18614 affects the WordPress plugin kama-clic-counter (v3.4.9) . Multiple connected sources confirm a SQL injection vulnerability exposed via the plugin’s admin.php, specifically the order parameter . The root cause is described as a lack of validation of externally entered SQL statements...

CVE-2017-18614: Improper Neutralization of Special Elements used in an SQL Command

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18615: Improper Neutralization of Input During Web Page Generation

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

PT-2019-8546

Name of the Vulnerable Software and Affected Versions kama-clic-counter plugin versions prior to 3.5.0 Description The issue allows for XSS. Recommendations For versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue...

PT-2019-8545

Name of the Vulnerable Software and Affected Versions kama-clic-counter plugin version 3.4.9 Description The issue concerns SQL injection via the order parameter in the "admin.php" endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations For...