CVE-2023-4824

The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

PT-2025-9797

Name of the Vulnerable Software and Affected Versions The JNews - WordPress Newspaper Magazine Blog AMP Theme versions prior to 11.6.7 Description The issue arises from the theme not properly validating if the user can register option is enabled before creating a user through the register handler...

CVE-2024-8682: Missing Authorization

The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 11.6.6. This is due to the plugin not properly validate if the user can register option is enabled prior to creating a user though the...

CVE-2023-4824

The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2023-4824

The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2023-4824: Cross-Site Request Forgery (CSRF)

The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

PT-2023-30749

Name of the Vulnerable Software and Affected Versions WooHoo Newspaper Magazine theme affected versions not specified Description The issue concerns the lack of a CSRF check when updating settings in the WooHoo Newspaper Magazine theme. This could allow attackers to make a logged-in admin change...

CVE-2017-15981

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15981

CVE-2017-15981 affects the Text/Content CMS “Responsive Newspaper Magazine & Blog CMS 1.0.” The vulnerability is SQL Injection via the id parameter on admin/admin_process.php during form editing. It is confirmed in multiple sources (NVD entry; related advisories and exploit references) and is exp...

Newspaper 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo:...

PT-2017-14336

Name of the Vulnerable Software and Affected Versions Responsive Newspaper Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For Responsive Newspaper Magazine & Blog CMS version 1.0, avoid...

CVE-2017-15981: Improper Neutralization of Special Elements used in an SQL Command

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

Newspaper 1.0 - SQL Injection

Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo: http://demo.geniusocean.com/newspaper/ Version: 1.0 Category:...