2907 matches found
CVE-2018-5312
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the posttitle parameter to wp-admin/post.php...
Design/Logic Flaw
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the posttitle parameter to wp-admin/post.php...
CVE-2018-5312
The CVE concerns the WordPress tabs-responsive plugin (version 1.8.0) with a reflected/stored XSS via the post_title parameter to wp-admin/post.php. The root cause is unvalidated/post_title handling in the tabs-responsive plugin, enabling script execution that can lead to user cookies exposure. D...
CVE-2018-5312: Improper Neutralization of Input During Web Page Generation
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the posttitle parameter to wp-admin/post.php...
CVE-2017-17908
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
Cross site request forgery (csrf)
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
CVE-2017-17908: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general...
CVE-2017-17909: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...
PHP Scripts Mall Responsive Realestate Script SQL Injection Vulnerability
PHP Scripts Mall Responsive Realestate Script is a PHP and MySQL based real estate sales website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Responsive Realestate Script version 3.2. A remote attacker can exploit this vulnerability by sending the...
PHP Scripts Mall Responsive Events And Movie Ticket Booking Script SQL Injection Vulnerability
PHP Scripts Mall Responsive Events And Movie Ticket Booking Script is a PHP based online movie ticket booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Responsive Events And Movie Ticket Booking Script version 3.2.1. The vulnerability can be...
CVE-2017-17628
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...
CVE-2017-17632
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...
Sql injection
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter...
Sql injection
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...
Sql injection
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...
CVE-2017-17631
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter...
CVE-2017-17632
CVE-2017-17632 affects the PHP Scripts Mall Responsive Events And Movie Ticket Booking Script 3.2.1. The vulnerability is an SQL Injection via the findcity.php q parameter. Public references (NVD/CNVD) describe remote exploitation with potentially high impact and critical CVSS 3.0 score (C/H/I/A ...
CVE-2017-17631
CVE-2017-17631 affects Multireligion Responsive Matrimonial 4.7.2, where a SQL injection is possible through the succid parameter in success-story.php. The vulnerability stems from unsafely handling user-supplied input, enabling an attacker to inject SQL commands. Product/version: Multireligion R...
CVE-2017-17628
CVE-2017-17628 affects Responsive Realestate Script 3.2 by PHP Scripts Mall. The vulnerability is a SQL injection in the property-list endpoint via the tbud parameter, allowing remote attackers to inject SQL commands. Public references (Exploit-DB entry 43297 and Packet Storm payload) indicate ex...