EUVD-2017-1431

Malware in sbrugna...

Themify Portfolio Post < 1.2.2 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. themifyportfolioposts imageh='100"...

CVE-2017-1000146

Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to the arbitrary execution of Javascript in the browser of a logged-in user because the title of the portfolio page was not being properly escaped in the AJAX script that updates the Add/remove watchlist link o...

CVE-2017-1000146: Improper Neutralization of Input During Web Page Generation

Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to the arbitrary execution of Javascript in the browser of a logged-in user because the title of the portfolio page was not being properly escaped in the AJAX script that updates the Add/remove watchlist link o...

PT-2017-10846

Name of the Vulnerable Software and Affected Versions Mahara versions 1.9 through 1.9.6 Mahara versions 1.10 through 1.10.4 Mahara versions 15.04 through 15.04.1 Description The issue allows for the arbitrary execution of Javascript in the browser of a logged-in user. This is due to the title of...

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

Wordpress Category List Portfolio Page 1.3 File Upload

File upload vulnerability in Wordpress Category List Portfolio Page plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

ClickTrackerASP SQL Injection

?---------------------بسم الله الرحمن الرحيم----------------- وجعلنا من بين ايديهم سدا ومن خلفهم سدا فاغشيناهم فهم لا يبصرون ?---------------------صدق الله العظيم----------------- Tybe: sitedetails.asp siteid REM0TE SQL !NJEC7!0N Vulnerability$ ? Vendor: www.pensacolawebdesigns.com ?download...