WordPress Mail Masta plugin SQL injection vulnerability (CNVD-2017-02638)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. WordPress Mail Masta plugin version 1.0 in...

Sql injection

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

CVE-2017-6578

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

wickerkane.com XSS vulnerability

Vulnerable URL: http://www.wickerkane.com/list-products.php?section=outdoor%22%3E%3Csvg/onload=confirm/openbugbounty/%3E=dining-chair Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

primalhealthresearch.com XSS vulnerability

Vulnerable URL: http://www.primalhealthresearch.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23082561 VIP website status:| No Check primalhealthresearch.com SSL...

WordPress Plugin User Login Log 2.2.1 - Cross-Site Scripting

WordPress Plugin User Login Log 2.2.1 - Cross-Site Scripting Source: https://sumofpwn.nl/advisory/2016/storedcrosssitescriptingvulnerabilityinuserloginlogwordpressplugin.html Abstract A stored Cross-Site Scripting vulnerability was found in the User Login Log WordPress Plugin. This issue can be...

WordPress User Login Log 2.2.1 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Source: https://sumofpwn.nl/advisory/2016/storedcrosssitescriptingvulnerabilityinuserloginlogwordpressplugin.html Abstract A stored Cross-Site Scripting vulnerability was found in the User Login Log WordPress Plugin. This issue can be exploite...

wchq.org XSS vulnerability

Vulnerable URL:...

majorleaguelacrosse.com XSS vulnerability

Vulnerable URL: https://www.majorleaguelacrosse.com/search/?q=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1215624 VIP...

tailor4less.com XSS vulnerability

Vulnerable URL: https://www.tailor4less.com/en/checkout/cart/x"/?action=crosssell=1sell=manjacketliningproduct=p829 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 68897 VIP website...

kinman.com XSS vulnerability

Vulnerable URL: http://kinman.com/model-products.php?modelid=59=SRV set=Stratocaster=4=yes=Named Sets" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2030367 VIP website status:| No Check kinman.com SSL...

operadorabanklot.com XSS vulnerability

Vulnerable URL:...

vhs-portugal.com XSS vulnerability

Vulnerable URL: http://www.vhs-portugal.com/main.php/'"--! Details: Description| Value ---|--- Patched:| Yes, at 01.03.2017 Latest check for patch:| 01.03.2017 07:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4695834 VIP website status:| No Check...

empregoofertas.com XSS vulnerability

Vulnerable URL: http://www.empregoofertas.com/?s=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=joblisting==address=eastlng=westlng=eastlat=westlat==0 Details: Description| Value ---|--- Patched:| Yes, at...

x5aa.com XSS vulnerability

Vulnerable URL: http://www.x5aa.com/?s=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 289977 VIP website status:| No Check x5aa.com SSL connection:| Grad...

vidooly.com XSS vulnerability

Vulnerable URL: https://vidooly.com/search/%22+onmouseover=confirm'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 113672 VIP website status:| No Coordinated Disclosure Timeline: Description|...

DEBIAN-CVE-2016-6897

Cross-site request forgery CSRF vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the checkajaxreferer...

UBUNTU-CVE-2016-6897

Cross-site request forgery CSRF vulnerability in the wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the checkajaxreferer...