6150 matches found
CVE-2017-17869
The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...
CVE-2017-17869: Improper Neutralization of Input During Web Page Generation
The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...
CVE-2017-17869
The CVE-2017-17869 entry concerns the WordPress plugin mgl-instagram-gallery . A Cross‑Site Scripting (XSS) vulnerability exists in the plugin’s single-gallery.php file via the media parameter, as described by CVE entries and CNVD/NVD records. The issue is caused by handling the media parameter i...
PT-2017-15058
Name of the Vulnerable Software and Affected Versions mgl-instagram-gallery plugin for WordPress affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the media parameter in the single-gallery.ph...
WordPress mgl-instagram-gallery Plugin Cross Site Scripting Vulnerability
Exploit for php platform in category web applications + Title: WordPress mgl-instagram-gallery Plugin Cross Site Scripting XSS + Author: Mostafa Gharzi + Vendor Homepage: www.Wordpress.org , www.pluginu.com/mgl-instagram-gallery/ + Tested on: Windows 10 & Kali Linux + Vulnerable File:...
Red Hat Single User Mode
The remote Red Hat system does not have authorization for single user mode enabled. An attacker with physical access can enter single user mode with root privileges via the LILO or GRUB boot menu. TRUSTED...
Apple iOS aarch64 Command Shell, Reverse TCP Inline
Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 152 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...
CVE-2017-17649
Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter...
CVE-2017-17649
Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter...
Semrush: Single Sing On - Clickjacking
Description: Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on. Browsers Verified In: Any Steps To Reproduce: Create HTML file containg...
CVE-2017-17649: Improper Control of Generation of Code
Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter...
PT-2017-14942
Name of the Vulnerable Software and Affected Versions Readymade Video Sharing Script version 3.2 Description The issue concerns HTML Injection via the comment parameter in the "single-video-detail.php" endpoint. Recommendations For Readymade Video Sharing Script version 3.2, consider restricting...
PHP Scripts Mall Readymade Video Sharing Script SQL Injection Vulnerability
PHP Scripts Mall Readymade Video Sharing Script is a set of PHP based online video sharing website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Readymade Video Sharing Script version 3.2. The vulnerability can be exploited by a remote attacker to...
PHP Scripts Mall Secure E-commerce Script SQL Injection Vulnerability
PHP Scripts Mall Secure E-commerce Script is a set of PHP based e-commerce website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Secure E-commerce Script version 2.0.1. A remote attacker can inject SQL into the category.php file by sending the...
PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability
PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...
CVE-2017-17629
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...
CVE-2017-17624
PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...
CVE-2017-17627
Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php reportvideos array parameter...