26 matches found
EUVD-2007-5948
Malware in sbrugna...
EUVD-2024-42407
Malicious code in bioql PyPI...
CVE-2024-47371
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Walter Pinem WP MyLinks wp-mylinks allows Stored XSS.This issue affects WP MyLinks: from n/a through = 1.0.6...
CVE-2024-47371
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Walter Pinem WP MyLinks wp-mylinks allows Stored XSS.This issue affects WP MyLinks: from n/a through = 1.0.6...
CVE-2024-47371
CVE-2024-47371 concerns the WP MyLinks WordPress plugin (versions
CVE-2024-47371 WordPress WP MyLinks plugin<= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Walter Pinem WP MyLinks wp-mylinks allows Stored XSS.This issue affects WP MyLinks: from n/a through = 1.0.6...
CVE-2024-47371 WordPress WP MyLinks plugin<= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Walter Pinem WP MyLinks wp-mylinks allows Stored XSS.This issue affects WP MyLinks: from n/a through = 1.0.6...
WordPress plugin WP MyLinks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
WordPress WP MyLinks plugin<= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP MyLinks versions = 1.0.6...
WordPress WP MyLinks Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)
Software WP MyLinks Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47371 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a980ce4c70f6 Credits SOPROBRO Required privilege Editor Publishe...
bcoos 1.0.10 modules/mylinks/ratelink.php lid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26629/info The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. These...
Xoops 2.0.17 1 Mylinks Module Brokenlink.PHP SQL injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26392/info Xoops Mylinks module is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this vulnerability could permit...
Xoops 2.0.5 .1 MyLinks Myheader.php Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9269/info Xoops is prone to a cross-site scripting vulnerability in the 'myheader.php' script included in the mylinks module. A remote attacker could exploit this issue by embedding hostile HTML and script code in a...
E-Xoop SQL注入漏洞
E-Xoops是一款WEB应用程序。 E-Xoops不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 E-Xoops E-Xoops 1.0.8 E-Xoops E-Xoops 1.0.5 Rev3 E-Xoops E-Xoops 1.0.5 Rev2 E-Xoops E-Xoops 1.0.5 Rev1 目前没有解决方案提供： http://phpxref.com/xref/exoops/nav.html...
Sql injection
Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to modules/arcade/index.php in a showstats action, or the lid parameter to 2 modules/myalbum/ratephoto.php or 3 modules/mylinks/ratelink.php, differe...
bcoos 1.0.10 - ratephoto.php SQL Injection
bcoos 1.0.10 - ratephoto.php SQL Injection source: https://www.securityfocus.com/bid/26629/info The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...
bcoos 1.0.10 - 'ratephoto.php' SQL Injection
source: https://www.securityfocus.com/bid/26629/info The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. These issues affect the application's arcad...
bcoos 1.0.10 - ratelink.php SQL Injection
bcoos 1.0.10 - ratelink.php SQL Injection source: https://www.securityfocus.com/bid/26629/info The 'bcoos' program is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...
CVE-2007-5978
SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter...
CVE-2007-5978
CVE-2007-5978 describes an SQL injection in the XOOPS mylinks module, via brokenlink.php parameter lid. The vulnerability allows remote attackers to execute arbitrary SQL commands. CVSS v2.0 base score 7.5 (HIGH) with network access, low attack complexity, no authentication required, and partial ...