47 matches found
CVE-2022-47434
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PB SEO Friendly Images plugin = 4.0.5 versions...
CVE-2022-47434
CVE-2022-47434 affects PB SEO Friendly Images plugin for WordPress, versioned at or below 4.0.5. The vulnerability is described as an admin+ Stored Cross-Site Scripting (XSS) flaw arising from insufficient input handling/sanitization, enabling stored XSS via administrative context. Public exploit...
CVE-2022-47434 WordPress PB SEO Friendly Images Plugin <= 4.0.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PB SEO Friendly Images plugin = 4.0.5 versions...
CVE-2022-47434: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in PB SEO Friendly Images plugin = 4.0.5 versions...
PT-2023-15310
Name of the Vulnerable Software and Affected Versions PB SEO Friendly Images plugin versions prior to 4.0.6 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations For versions prior to 4.0.6...
Adult popunder campaign used in mainstream ad fraud scheme
This blog post was authored by Jerome Segura Online advertising is a multi billion dollar industry with projected spending to reach over 600 billion U.S. dollars for 2022. It's not surprising that criminals are trying their hardest to abuse this ecosystem in any way that they can. One of the...
MetInfo SQL Injection Vulnerability (CNVD-2021-74293)
MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. MetInfo 7.0.0 version of the existence of SQL injection vulnerability,...
MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2021-99308)
MetInfo uses PHP Mysql architecture, is a very SEO-friendly, comprehensive, multi-language, responsive display, extremely suitable for enterprise, company website building cms system. metInfo version 7.0.0 cross-site request forgery vulnerability. The attacker can use the admin/?n=admin...
Zhengzhou Weikou Network Technology Co., Ltd. eEnterprise CMS has a file upload vulnerability
EECO CMS is a marketing enterprise website system based on SEO-friendly development in China. Zhengzhou Weikou Network Technology Co., Ltd. eEnterprise CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...
Arbitrary File Deletion Vulnerability in DSCMS Enterprise Content Management System
DSCMS is Changsha Deshaun network based on ThinkPHP5.0 framework development, using PHP + Mysql architecture, is a suitable for the construction of enterprise website cms station building system features a comprehensive SEO-friendly dual-language open source CMS system. DSCMS enterprise station...
SEO Friendly Images 2.7.4 - seo-friendly-images.php Add Page CSRF
The SEO Friendly Images WordPress plugin was affected by a seo-friendly-images.php Add Page CSRF security vulnerability...
Lyrics 3.0 - Engine SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99...
iLister Listing Software LFI Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iLister listing script LFi Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://www.worksforweb.com/ Autho...
WebsiteBaker 2.8.1 <= Arbitrary File Upload Vulnerability
OVERVIEW WebsiteBaker 2.8.1 and lower versions are vulnerable to Arbitrary File Upload. 2. BACKGROUND WebsiteBaker helps you to create the website you want: A free, easy and secure, flexible and extensible open source content management system CMS. Create new templates within minutes - powered...
OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage
OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If...
Multiple Vulnerabilities in OpenClassifieds 1.7.0.3
I understand that this is a vain hope that bugtraq will start posting something useful. Author:Michael Brooks Rookbr Application:OpenClassifieds 1.7.0.3br download: http://open-classifieds.com/download/br Exploit chain:captcha bypass-sqliinsert-persistant xss on front pagebr If registration is...
OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass / SQL Injection / Persistent Cross-Site Scripting on FrontPage
Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If registration is required an extra link in the chain is added: Exploit chain:blind sqliselect-captcha...
Lyrics V3 Engine SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99 Author : Sid3^effects aKa HaRi special...
Lyrics 3.0 - Engine SQL Injection
Lyrics 3.0 - Engine SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99 Auth...
Lyrics V3 engine SQL injection Vulnerabilty
Exploit for php platform in category web applications =========================================== Lyrics V3 engine SQL injection Vulnerabilty =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...