WordPress Laborator Neon Theme 2.0 - Cross-Site Scripting Detection

WordPress Laborator Neon theme 2.0 contains a cross-site scripting vulnerability via the data/autosuggest-remote.php q parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Laborator Neon theme 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

EUVD-2018-2357

Malware in sbrugna...

CVE-2019-20141

An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter...

Cross site scripting

An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter...

CVE-2019-20141

An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter...

CVE-2019-20141: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter...

CVE-2018-19651

admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery SSRF via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL...

CVE-2018-19651: Server-Side Request Forgery (SSRF)

admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery SSRF via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL...

PT-2018-15030

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue allows for Server Side Request Forgery SSRF via a "what=importurl&url=" request with an http or https URL to the "admin/functions/remote.php" endpoint. This also enables...

Server Side Request Forgery (SSRF)

concrete5 is susceptible to server side request forgery SSRF. The vulnerability is possible because of file replacing function in tools/files/importers/remote.php which allows to scan local network and to enumerate open TCP ports...

Server side request forgery (ssrf)

A Server Side Request Forgery SSRF vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page...

CVE-2018-13790

A Server Side Request Forgery SSRF vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page...

CVE-2018-13790: Server-Side Request Forgery (SSRF)

A Server Side Request Forgery SSRF vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network, because of URL functionality on the File Manager page...

PT-2018-12187

Name of the Vulnerable Software and Affected Versions concrete5 version 8.2.0 Description A Server Side Request Forgery SSRF issue in the remote.php file can lead to attacks on the local network and mapping of the internal network, due to URL functionality on the File Manager page. Recommendation...

Sql injection

CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...

CVE-2018-10283

CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...

CVE-2018-10283

CVE-2018-10283 affects CliqueMania loja virtual version 14. It is a SQL Injection flaw reachable via the patch/remote.php id parameter in a recomendar action. Multiple sources describe that a remote attacker can exploit the vulnerability to execute SQL commands using the id parameter. The provide...

CVE-2018-10283: Improper Neutralization of Special Elements used in an SQL Command

CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...

PT-2018-9799

Name of the Vulnerable Software and Affected Versions: CliqueMania loja virtual version 14 Description: The issue is related to SQL Injection, which occurs via the id parameter in a recomendar action, specifically in the patch/remote.php endpoint. Recommendations: For version 14, avoid using the ...

DokuWiki 'remote.php' remote elevation of privilege vulnerability

DokuWiki is an open source wiki engine program written in PHP. A remote elevation of privilege vulnerability exists in DokuWiki 'remote.php', which can be exploited by a remote attacker to execute arbitrary code with elevated privileges...