17 matches found
EUVD-2021-11542
Malware in sbrugna...
CVE-2021-24630
The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...
WordPress Schreikasten WordPress Plugin SQL Injection Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Schreikasten WordPress plugin in version 0.14.18 and...
CVE-2021-24630
The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...
CVE-2021-24630
The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...
Sql injection
The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...
CVE-2021-24630
The CVE concerns WordPress Schreikasten plugin
CVE-2021-24630 Schreikasten <= 0.14.18 - Author+ SQL Injections
The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...
WordPress SQL注入漏洞
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Schreikasten WordPress plugin in version 0.14.18 and...
WordPress Schreikasten plugin <= 0.14.18 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability discovered by Shreya Pohekar Codevigilant Project in WordPress Schreikasten plugin versions = 0.14.18. Solution Deactivate and delete. This plugin has been closed as of June 21, 2021 and is not available for download. Reason: Security Issue...
Schreikasten <= 0.14.18 - Author+ SQL Injections
The plugin does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...
Schreikasten <= 0.14.18 - Author+ SQL Injections
The plugin does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author PoC...
Schreikasten 0.14.13 - wp-admin/admin-ajax.php Multiple Parameter XSS
The Schreikasten WordPress plugin was affected by a wp-admin/admin-ajax.php Multiple Parameter XSS security vulnerability...
WordPress Schreikasten 0.14.13 XSS
No description provided by source. Title: WordPress Schreikasten 0.14.13 XSS Date: 5/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard http://wordpress.org/extend/plugins/schreikasten/ Post your XSS in either the name or content fields and the XSS will appear...
WordPress Schreikasten 0.14.13 Cross Site Scripting
Title: WordPress Schreikasten 0.14.13 XSS Date: 5/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard http://wordpress.org/extend/plugins/schreikasten/ Post your XSS in either the name or content fields and the XSS will appear on the homepage. Post your XSS as...
WordPress Plugin Schreikasten 0.14.13 - Cross-Site Scripting
WordPress Plugin Schreikasten 0.14.13 - Cross-Site Scripting Title: WordPress Schreikasten 0.14.13 XSS Date: 5/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard http://wordpress.org/extend/plugins/schreikasten/ Post your XSS in either the name or content fiel...
WordPress Plugin Schreikasten 0.14.13 - Cross-Site Scripting
Title: WordPress Schreikasten 0.14.13 XSS Date: 5/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard http://wordpress.org/extend/plugins/schreikasten/ Post your XSS in either the name or content fields and the XSS will appear on the homepage. Post your XSS as...