Lucene search
+L

8 matches found

Mend
Mend
•added 2021/10/21 7:38 p.m.•4 views

CVE-2021-39328

The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $jobboardprivacypolicylabel variable echo'd out via the /admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access t...

5.5CVSS0.00915EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/10/21 12:00 a.m.•6 views

PT-2021-22535

Name of the Vulnerable Software and Affected Versions: The Simple Job Board WordPress plugin versions up to and including 2.9.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient escaping on the job board privacy policy label variable. This variable is echo'd out...

5.5CVSS0.00915EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/21 12:00 a.m.•9 views

CVE-2021-39328: Improper Neutralization of Input During Web Page Generation

The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $jobboardprivacypolicylabel variable echo'd out via the /admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access t...

5.5CVSS5.7AI score0.00915EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/08 12:00 a.m.•7 views

CVE-2018-12055: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contactus.php, faq.php, about.php, photogallery.php, privacy.php, and so on...

9.8CVSS8.2AI score0.03123EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2018/06/08 12:00 a.m.•7 views

PT-2018-10976

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue concerns SQL Injections in PHP Scripts Mall Schools Alert Management Script. Specifically, the vulnerability exists via crafted POST data in...

9.8CVSS0.03123EPSS
SaveExploits5References3
Openbugbounty
Openbugbounty
•added 2017/05/15 7:08 a.m.•18 views

netst.jp XSS vulnerability

Vulnerable URL: http://netst.jp/taichikun/mobile/privacy.php?cartid="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

6.3AI score
SaveExploits0
xssed
xssed
•added 2010/10/11 12:00 a.m.•18 views

Unfixed XSS vulnerability at mmo2.myfarmvillage.com

Security researcher Genosite, has submitted on 10/11/2010 a cross-site-scripting XSS vulnerability affecting mmo2.myfarmvillage.com, which at the time of submission ranked 19921 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

SaveExploits0References1
Prion
Prion
•added 2007/08/03 8:17 p.m.•24 views

Sql injection

SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the pageoptions parameter to 1 options-general.php, 2 options-writing.php, 3 options-reading.php, 4 options-discussion.php, 5 options-privacy.php, 6...

6.5CVSS8.3AI score0.01899EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder