WP MLM Unilevel <= 4.0 - Unauthenticated Privilege Escalation

Description The WP MLM SOFTWARE PLUGIN plugin for WordPress is vulnerable to privilege in all versions up to, and including, 4.0. This makes it possible for unauthenticated attackers to take over arbitrary accounts on the site...

CVE-2023-51475

Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0...

CVE-2023-51475 WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0...

CVE-2023-51475

CVE-2023-51475 is an Unrestricted Upload of File with Dangerous Type issue in the WP MLM SOFTWARE PLUGIN (WP MLM PLUGIN) with affected versions from n/a through 4.0. The connected data confirms this CVE is tied to an unauthenticated arbitrary file upload vulnerability in WP MLM, and the patch sta...

PT-2023-31839 · WordPress · Ioss Wp Mlm Software Plugin

Name of the Vulnerable Software and Affected Versions: WP MLM SOFTWARE PLUGIN versions n/a through 4.0 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in the IOSS WP MLM SOFTWARE PLUGIN. This allows for the upload of files with potentially...

WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File Upload

Software WP MLM Unilevel Type Plugin Vulnerable versions = 4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-51475 Patch priority High CVSS severity High 10 Developer Claim ownership PSID e72adac8aff3 Credits Rafie Muhammad Patchstack Required privilege...

WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Privilege Escalation

Software WP MLM Unilevel Type Plugin Vulnerable versions = 4.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51476 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 6b4b7ace12b3 Credits Rafie...

mlm-admin.de Cross Site Scripting vulnerability OBB-2320670

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PHP Scripts Mall Bitcoin MLM Software Cross-Site Scripting Vulnerability

PHP Scripts Mall Bitcoin MLM Software is a PHP bitcoin management software from PHP Scripts Mall India.A cross-site scripting vulnerability exists in PHP Scripts Mall Bitcoin MLM Software version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PHP Scripts Mall Investment MLM Software Cross-Site Scripting Vulnerability

PHP Scripts Mall Investment MLM Software is an investment money management system software from PHP Scripts Mall India. A cross-site scripting vulnerability exists in the My Profile Section of PHP Scripts Mall Investment MLM Software version 2.0.2, which can be exploited by an attacker to execute...

CVE-2019-7552

An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...

Design/Logic Flaw

An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...

CVE-2019-7552

An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...

CVE-2019-7552

CVE-2019-7552 affects PHP Scripts Mall Investment MLM Software 2.0.2. The vulnerability is a Stored XSS in the My Profile Section due to lack of input sanitization in the Edit Name field. Connected sources (Red Hat, CNVD, NVD entries, and related records) corroborate the XSS issue in this softwar...

Sql injection

SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0...

CVE-2018-17843

SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0...

CVE-2018-17843

SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0...

CVE-2018-17843

CVE-2018-17843 describes a SQL injection in multiple MLM software packages (ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Re...

CVE-2019-6126

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...

Design/Logic Flaw

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...