CVE-2026-32472

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472

CVE-2026-32472 is an unauthenticated Broken Access Control vulnerability in the WordPress Online Contact Widget plugin, affecting versions ≤ 1.3.0 . The flaw allows an unauthenticated attacker to access data they should not be able to, resulting in high confidentiality impact with no integrity or...

EUVD-2026-60906

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472 WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472 WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Online Contact Widget versions = 1.3.0...

PT-2026-77048

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472: Missing Authorization

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

EUVD-2010-4965

Malware in sbrugna...

EUVD-2009-4888

Malware in sbrugna...

CVE-2009-4926

Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...

Online Contact Manager 3.0 index.php showGroup Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

Online Contact Manager 3.0 delete.php id Parameter XSS

No description provided by source...

Online Contact Manager 3.0 edit.php id Parameter XSS

No description provided by source...

Esoftpro Online Contact Manager Multiple Vulnerabilities

No description provided by source. Exploit Title: Esoftpro Online Contact Manager Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:3 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat...

Sql injection

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5001

The CVE-2010-5001 entry concerns the esoftpro Online Contact Manager 3.0. The vulnerability is a SQL injection in view.php triggered by the id parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause is unsanitized input in the id parameter leading to unintended query ma...

CVE-2010-5001: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1936

Name of the Vulnerable Software and Affected Versions esoftpro Online Contact Manager version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the view.php file. Recommendations For esoftpro Online Contact...