CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002008

CVE-2017-1002008 affects the WordPress plugin membership-simplified-for-oap-members-only v1.58. The vulnerability is in the file download.php, which does not verify that a user is logged in or has download privileges, enabling an attacker to obtain arbitrary files. Public writeups and advisories ...

CVE-2017-1002009

CVE-2017-1002009 affects the WordPress plugin Membership Simplified v1.58. The vulnerability is in membership-simplified-for-oap-members-only/updateDB.php where unsanitized input via the recordId parameter in the delete function enables blind SQL injection. Impact details are stated as high/sever...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002010

CVE-2017-1002010 affects the WordPress plugin Membership Simplified (v1.58). The issue is a blind SQL injection in the file membership-simplified-for-oap-members-only/updateDB.php, caused by insufficient sanitization of the input parameter recordId used in delete_media. Public metrics show a high...

PT-2017-10999

Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability in the Membership Simplified plugin for WordPress. Specifically, the code in the updateDB.php file is vulnerable because it fails to sanitize...

PT-2017-10997

Name of the Vulnerable Software and Affected Versions membership-simplified-for-oap-members-only version 1.58 Description The issue concerns a lack of proper access control in the file download functionality. Specifically, the download.php file in the membership-simplified-for-oap-members-only...

PT-2017-10998

Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability. It occurs because the code in the updateDB.php file does not properly sanitize user input via the recordId variable in the delete function...

CVE-2017-1002010: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

CVE-2017-1002008: Unrestricted Upload of File with Dangerous Type

Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges...

CVE-2017-1002009: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

Memory out-of-bounds write vulnerability in WPS Text WordConvertDll module

WPS is an office software developed by Kingsoft Office Software. A memory out-of-bounds write vulnerability exists in the WPS text WordConvertDll module. The vulnerability is caused due to the program failing to validate the buffer length when the user uses the Traditional and Simplified Conversi...

Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download

Vulnerability title: Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Membership Simplified 1.58 Vulnerabilities exist in the url: /wp-content/plugins/membership-simplified-for-oap-members-only/download.php...

WordPress Membership Simplified 1.58 Arbitrary File Download

Title: Arbitrary file download vulnerability in Wordpress Plugin Membership Simplified v1.58 Author: Larry W. Cashdollar, @larry0 Date: 2017-03-13 CVE-ID:CVE-2017-1002008 Download Site: https://wordpress.org/plugins/membership-simplified-for-oap-members-only Vendor:...

Wordpress Membership Simplified v1.58 Plugin - Arbitrary File Download Exploit

Exploit for php platform in category web applications import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download\nDiscovery:...

WordPress Plugin Membership Simplified 1.58 - Arbitrary File Download Vulnerability

Arbitrary file download vulnerability found in WordPress Plugin Membership Simplified version 1.58. Plugin does't check whether the user is logged in or not and if logged does it has file download privileges. Solution We were unable to find patched version of this plugin. Also, this plugin remove...

シンプル化された Windows 7 および Windows 8.1 のサービス モデル: 最新の改善点について

本記事は、Windows for IT Pros のブログ "Simplified servicing for Windows 7 and Windows 8.1: the latest improvements" 2017 年 1 月 13 日 米国時間公開 を翻訳したもの...

Wordpress simplified-content plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers. simplified-content is one of the plug-ins used to simplify the content. A cross-site scripting vulnerability exists in...