218 matches found
CVE-2017-18517
CVE-2017-18517 affects the WordPress plugin bws-pinterest prior to version 1.0.5 from the vendor BestWebSoft. The connected document set describes multiple Cross-Site Scripting (XSS) issues in this plugin, enabling an attacker to execute arbitrary JavaScript in victims’ browsers. The Nuclei templ...
CVE-2017-18517
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...
pinterest.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-702434 Description| Value ---|--- Affected Website:| pinterest.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...
Pinterest Browser Extension Injects Unwanted Code into 5K Websites
A buggy Mozilla Firefox browser extension for sharing links to Pinterest has automatically injected malformed code into at least 5,000 websites. The code injection in this instance was not malicious, but researchers at Sucuri, which discovered and reported the problem on Tuesday, said the inciden...
Joomla! Pinterest Clone Social Pinboard,2.0,SQL Injection
Joomla! Pinterest Clone Social Pinboard from apptha.com, 2.0, multiple SQL Injection vulnerabilities...
Sql injection
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pinid or userid parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVa...
CVE-2018-5987
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pinid or userid parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVa...
CVE-2018-5987
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pinid or userid parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVa...
CVE-2018-5987
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pinid or userid parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVa...
CVE-2018-5987
CVE-2018-5987 affects the Joomla! Pinterest Clone Social Pinboard 2.0 component. The SQL Injection exists via unsanitized parameters across multiple actions: pin_id and user_id in task=getlikeinfo; ends in view=gift; category in view=home; uid in view=pindisplay and view=likes; and searchVal in v...
Joomla Pinterest Clone Social Pinboard 2.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Vendor Homepage: https://www.apptha.com/ Software Link: https://www.apptha.com/joomla/social-pinboard-script Version: 2.0 Category: Webapps Tested on:...
Joomla! Pinterest Clone Social Pinboard 2.0 SQL Injection
Exploit Title: Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://www.apptha.com/ Software Link: https://www.apptha.com/joomla/social-pinboard-script Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5987...
Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection
Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Exploit Title: Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://www.apptha.com/ Software Link: https://www.apptha.com/joomla/social-pinboard-script Version: 2.0 Category:...
WordPress Pinterest Feed plugin <=1.1.1 - Multiple Authenticated Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated Cross-Site Scripting XSS vulnerabilities found by d4wner in WordPress Pinterest Feed plugin versions =1.1.1. Solution Update the WordPress Pinterest Feed plugin to the latest available version at least 1.1.2...
WordPress Pinterest Feed plugin <=1.1.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by d4wner in WordPress Pinterest Feed plugin versions =1.1.1. Solution Update the WordPress Pinterest Feed plugin to the latest available version at least 1.1.2...
WordPress weblizar-pinterest-feeds plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. weblizar-pinterest-feeds plugin is used in one of the plugin for displaying Pinterest data. A cross-site scriptin...
WordPress weblizar-pinterest-feeds plugin cross-site scripting vulnerability (CNVD-2018-01274)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. weblizar-pinterest-feeds plugin is used in one of the plugin for displaying Pinterest data. A cross-site scriptin...
WordPress weblizar-pinterest-feeds plugin cross-site scripting vulnerability (CNVD-2018-01275)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. weblizar-pinterest-feeds plugin is used in one of the plugin for displaying Pinterest data. A cross-site scriptin...
WordPress weblizar-pinterest-feeds plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. weblizar-pinterest-feeds plugin is used in one of the plugin for displaying Pinterest data. A cross-site request...