CVE-2017-2284

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2284

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2284

CVE-2017-2284 affects the WordPress Popup Maker plugin. A cross-site scripting vulnerability exists in Popup Maker prior to version 1.6.5. The public details describe a reflected/unspecified-XSS risk that could allow injection of arbitrary scripts in pages processed by the plugin, potentially aff...

Socusoft: XSS in HTML Content Generated by Flash Slideshow Maker (All Versions)

The vulnerability identified does not exist within the software application itself, instead, the vulnerability presents itself within the application's exported files which end up hosted on an external web-server. Socusoft's Flash Slideshow Maker application has two configuration themes associate...

CVE-2015-2798

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2015-2798

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2015-2798

The CVE is for Joomla! Form Maker component: Contact Form Maker 1.0.1. The vulnerability is an SQL injection in the id parameter of a request, allowing remote attackers to execute arbitrary SQL commands. This is described in the CVE entry as a traditional SQLi affecting the component, with potent...

WordPress Popup Maker plugin <=1.6.4 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability in WordPress Popup Maker plugin 1.6.4 and earlier versions allows an attacker to inject arbitrary web script or HTML. Solution Update WordPress Popup Maker plugin to the latest available version at least 1.6.5...

WordPress Popup Maker Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Popup Maker is one of the ads popup plugin. A cross-site scripting vulnerability exists in WordPress Popup Maker...

Popup Maker <= 1.6.4 - Authenticated Cross-Site Scripting (XSS)

The Popup Maker – Popup Forms, Opt-ins & More WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

JVN#92921024: WordPress plugin "Popup Maker" vulnerable to cross-site scripting

The WordPress plugin "Popup Maker" provided by Popup Maker contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the...

Glitch Video Maker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glitch Video Maker published at the 'play' market has multiple vulnerabilities...

Music Maker JAM - Apache license, BSD license, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Music Maker JAM published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Windows operating system allows a perpetrator to obtain information that can be used to compromise the target system.

The vulnerability of the Windows DVD Maker application on the Windows operating system is related to improper correction of processed files. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information that can be used to compromise the target system using a...

CVE-2017-0045

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."...

CVE-2017-0045

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."...

Cross site request forgery (csrf)

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."...

CVE-2017-0045

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain information to compromise a target system, aka "Windows DVD Maker Cross-Site Request Forgery Vulnerability."...

CVE-2017-0045

CVE-2017-0045 is a Windows DVD Maker XML External Entity (XXE) information-disclosure vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, and Windows Vista SP2. The vulnerability arises when parsing crafted .msdvd files, enabling an attacker to access local files information on...