4523 matches found
Code injection
The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...
CVE-2017-18015
The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...
CVE-2017-18015
The CVE-2017-18015 entry concerns the WordPress plugin ILLID Share This Image (versions prior to 1.04). The underlying issue is a Cross-Site Scripting (XSS) flaw exploitable through the sharer.php URL parameter. Affected component: the Share This Image plugin for WordPress; root cause per the sou...
CVE-2017-18015
The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...
PT-2018-6611 · Illid · Illid Share This Image
Name of the Vulnerable Software and Affected Versions: ILLID Share This Image plugin versions prior to 1.04 Description: The issue concerns a cross-site scripting XSS flaw. It is exploited via the sharer.php url parameter. Recommendations: For versions prior to 1.04, update to version 1.04 or lat...
CVE-2017-17763
SuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file transfer, which makes it easier for remote attackers to send crafted files, as demonstrated by APK injection...
CVE-2017-17763
SuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file transfer, which makes it easier for remote attackers to send crafted files, as demonstrated by APK injection...
CVE-2017-17763
SuperBeam versions up to 4.1.3 are affected when using LAN or WiFi Direct Share. The issue is that file transfers do not use HTTPS or any integrity-protection mechanism, enabling a remote attacker to send crafted files (e.g., via APK injection). Affected component: the LAN/WiFi Direct sharing cha...
WordPress Share This Image 1.03 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Share This Image 1.03 Share This Image is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
Share This Image <= 1.03 - Cross-Site Scripting (XSS)
The Share This Image WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Share This Image 1.03 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Share This Image 1.03 Share This Image is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script co...
App Layering: Test SMB File Share function says permissions incorrect
When configuring a Network File Share for the ELM in App Layering, you get the error "Permissions incorrect on the file share for the path: . Please contact Support for more information."...
VulnCheck KEV: CVE-2017-7494
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it...
chiangmaifishing.com XSS vulnerability
Open Bug Bounty ID: OBB-428595 Description| Value ---|--- Affected Website:| chiangmaifishing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Infogram: Persistent XSS in share button
Persistent XSS in "Share" button was found: 1. In custom link field for "Share" button add: ". 2. Share the infographic publicly, navigate to its public URL and click the "Share" button. 3. See that pop-up window activates...
CVE-2017-15969
PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...
Sql injection
PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...
CVE-2017-15969
PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...
CVE-2017-15969
CVE-2017-15969 affects PG All Share Video 1.0. Description from CNVD/NVD indicates a SQL injection vulnerability exploitable via PATH_INFO in endpoints such as /search/tag, /friends/index, /users/profile, and /video_catalog/category. The root cause is unsanitized PATH_INFO allowing injected SQL c...