16 matches found
MINI-J8CM-GHMR-7MCG
Bulletin has no description...
MINI-X65C-3PVX-6MCG
Bulletin has no description...
CVE-2024-13672: Improper Neutralization of Input During Web Page Generation
The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mcg' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied...
PT-2025-7377 · WordPress · The Mini Course Generator
Name of the Vulnerable Software and Affected Versions: The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress versions up to, and including, 1.0.5 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and outpu...
RHEL 8 : mcg (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet CVE-2021-29923...
mcg-boenen.de Cross Site Scripting vulnerability OBB-1394676
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mcg-fl.com Cross Site Scripting vulnerability OBB-1298001
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2010-5505
Name of the Vulnerable Software and Affected Versions MRCGIGUY MCG FreeTicket version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands via the name, email, subject, and message parameters in a "sendmess" action when magic quotes gpc is disabled. Recommendation...
CVE-2010-4500: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 subject, and 4 message parameters in a sendmess action. NOTE: the provenance of this...
CVE-2010-4358
The CVE-2010-4358 entry concerns the MRCGIGUY (MCG) Guestbook 1.0, specifically the gb.cgi component. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the name, email, website, and message parameters...
PT-2010-5440
Name of the Vulnerable Software and Affected Versions MRCGIGUY MCG FreeTicket version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands due to multiple SQL injection vulnerabilities in the contact.php file. This occurs when the magic quotes gpc setting is...
CVE-2010-4358: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in gb.cgi in MRCGIGUY MCG Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, 3 website, and 4 message parameters...
CVE-2010-4363: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...
PT-2010-5435
Name of the Vulnerable Software and Affected Versions MRCGIGUY MCG Guestbook version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name, email, website, and message parameters in the gb.cgi file. This can lead to cross-site scripting XSS attacks...
[eVuln.com] Multiple XSS in MCG GuestBook
New eVuln Advisory: Multiple XSS in MCG GuestBook Summary: http://evuln.com/vulns/144/summary.html Details: http://evuln.com/vulns/144/description.html -----------Summary----------- eVuln ID: EV0144 Software: MCG GuestBook Vendor: Mrcgiguy Version: 1.0 Critical Level: low Type: Cross Site Scripti...
MCG GuestBook 1.0 Cross Site Scripting
New eVuln Advisory: Multiple XSS in MCG GuestBook Summary: http://evuln.com/vulns/144/summary.html Details: http://evuln.com/vulns/144/description.html -----------Summary----------- eVuln ID: EV0144 Software: MCG GuestBook Vendor: Mrcgiguy Version: 1.0 Critical Level: low Type: Cross Site Scripti...