CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

EUVD-2017-9727

Malware in sbrugna...

EUVD-2017-9728

Malware in sbrugna...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

WordPress kama-clic-counter plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. kama-clic-counter is a plugin that uses the page download feature in it. A SQL injection vulnerability exists in version 3.4.9 of the...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

Sql injection

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

Cross site scripting

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18615

The CVE-2017-18615 entry concerns the Kama Click Counter WordPress plugin, specifically versions prior to 3.5.0, which is affected by a cross-site scripting (XSS) vulnerability. The vulnerability is documented across multiple sources (NVD, RH, Red Hat, WPVulndb, CVE list) with consistent wording ...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18614

CVE-2017-18614 affects the WordPress plugin kama-clic-counter (v3.4.9) . Multiple connected sources confirm a SQL injection vulnerability exposed via the plugin’s admin.php, specifically the order parameter . The root cause is described as a lack of validation of externally entered SQL statements...

CVE-2017-18614: Improper Neutralization of Special Elements used in an SQL Command

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18615: Improper Neutralization of Input During Web Page Generation

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

PT-2019-8545

Name of the Vulnerable Software and Affected Versions kama-clic-counter plugin version 3.4.9 Description The issue concerns SQL injection via the order parameter in the "admin.php" endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations For...

PT-2019-8546

Name of the Vulnerable Software and Affected Versions kama-clic-counter plugin versions prior to 3.5.0 Description The issue allows for XSS. Recommendations For versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue...