EUVD-2017-11103

Malware in sbrugna...

CVE-2017-20096

A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20096

A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20096

A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely...

Cross site scripting

A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20096

WP-SpamFree Anti-Spam Plugin for WordPress (version 2.1.1.4) contains a cross-site scripting (XSS) vulnerability described as affecting an unknown part of the plugin. The issue permits remote initiation of an XSS attack. The connected documents consistently identify it as a basic XSS vulnerabilit...

CVE-2017-20096 WP-SpamFree Anti-Spam Plugin cross site scriting

A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipulation leads to basic cross site scripting. It is possible to initiate the attack remotely...

WordPress SpamFree Plugin <= 1.9.2 - Full Path Disclosure

This plugin is prone to a multiple script direct request path disclosure. Solution Upgrade the plugin...

WP-SpamFree 3.2.1 - Spam SQL Injection

The wp-spamfree WordPress plugin was affected by a Spam SQL Injection security vulnerability...

WordPress WP-SpamFree SQL Injection

Exploit Title: WordPress wpsf-js plugin, SQL Injection Date: 2011-09-25 Author: cheki Version:3.2.1 Tested on:linux Used: "sqlmap" SQL Injection http:///wp-content/plugins/wp-spamfree/js/wpsf-js.php?id=1 Exploit:id=-1; WAITFOR DELAY '0:0:5';-- or id=-1 AND SLEEP5...

WordPress Plugin WP-SpamFree Spam Plugin - SQL Injection

WordPress Plugin WP-SpamFree Spam Plugin - SQL Injection Exploit Title: WordPress wpsf-js plugin, SQL Injection Date: 2011-09-25 Author: cheki Version:3.2.1 Tested on:linux Used: "sqlmap" SQL Injection http:///wp-content/plugins/wp-spamfree/js/wpsf-js.php?id=1 Exploit:id=-1; WAITFOR DELAY...

WordPress Plugin WP-SpamFree Spam Plugin - SQL Injection

Exploit Title: WordPress wpsf-js plugin, SQL Injection Date: 2011-09-25 Author: cheki Version:3.2.1 Tested on:linux Used: "sqlmap" SQL Injection http:///wp-content/plugins/wp-spamfree/js/wpsf-js.php?id=1 Exploit:id=-1; WAITFOR DELAY '0:0:5';-- or id=-1 AND SLEEP5...

WP-SpamFree WordPress Spam Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress wpsf-js plugin, SQL Injection Date: 2011-09-25 Author: cheki Version:3.2.1 Tested on:linux Used: "sqlmap" SQL Injection http:///wp-content/plugins/wp-spamfree/js/wpsf-js.php?id=1 Exploit:id=-1; WAITFOR DELAY '0:0:5';--...