CVE-2017-10991

The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wpsreferrerspage page...

Design/Logic Flaw

The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wpsreferrerspage page...

CVE-2017-10991

The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wpsreferrerspage page...

CVE-2017-10991

CVE-2017-10991 affects the WordPress WP Statistics plugin up to version 12.0.9. The vulnerability is an XSS in the rangestart and rangeend parameters on the wps_referrers_page. CVSS metrics in the provided documents indicate: confidentiality impact LOW, integrity impact PARTIAL, availability impa...

WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting (XSS)

The WP Statistics WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://mywordpress.com/wp-admin/admin.php?page=wpsreferrerspage=123123"...

Cross-site scripting vulnerability in WordPress WP Statistics plugin

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.WP Statistics is one of the website statistical analysis plugin. A reflective xss vulnerability exists in the WordPres...

WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting (XSS)

The WP Statistics WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. http://mywordpress.com/wp-admin/admin.php?page=wpsreferrerspage&rangeend=123123"alert1a a="...

WordPress WP Statistics Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Statistics plugin. An attacker can exploit this vulnerability...

WordPress WP Statistics Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress WP Statistics plugin. An attacker can exploit the vulnerability to obta...

ciderspace.co.uk XSS vulnerability

Vulnerable URL: http://www.ciderspace.co.uk/ASP/statistics/oppositionmeetings.asp?OppositionName=1"...

WP Statistics SQL Injection vulnerability

Security experts at Sucuri have discovered a SQL Injection vulnerability in WP Statistics, one of the most popular WordPress plugins, that is currently installed on over 300,000 websites. The SQL Injection vulnerability in WP Statistics could be exploited by attackers, with at least a subscriber...

WordPress Statistics Cross Site Scripting

A XSS injection vulnerability exists in WordPress Statistics Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary commands on the affected system...

WordPress WP Statistics <= 12.0.7 Authenticated SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:veronalabs:wpstatistics"; ifdescription...

WordPress Statistics Plugin SQL Injection

An SQL injection vulnerability has been reported in WordPress Statistics Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress WP Statistics plugin <=12.0.7 - Authenticated SQL Injection vulnerability

WordPress WP Statistic plugin in version 12.0.7 and earlier versions vulnerable to Authenticated SQL Injection vulnerability due to lack of sanitization in user-provided data. In this case users even with subscriber rights could use this vulnerability to steal sensitive data. Solution The plugin...

WordPress Plugin Used by 300,000+ Sites Found Vulnerable to SQL Injection Attack

A SQL Injection vulnerability has been discovered in one of the most popular Wordpress plugins, installed on over 300,000 websites, which could be exploited by hackers to steal databases and possibly hijack the affected sites remotely. The flaw has been discovered in the highly popular WP...

WP Statistics <= 12.0.7 - Authenticated SQL Injection

The WP Statistics WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

ALPINE-CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged...

bxpbet.com XSS vulnerability

Open Bug Bounty ID: OBB-235690 Description| Value ---|--- Affected Website:| bxpbet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-3820 · Postgresql +3 · Postgresql +3

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 9.2.21 PostgreSQL versions 9.3.x prior to 9.3.17 PostgreSQL versions 9.4.x prior to 9.4.12 PostgreSQL versions 9.5.x prior to 9.5.7 PostgreSQL versions 9.6.x prior to 9.6.3 Description: The issue is related to...