32 matches found
CVE-2026-0753
The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscfname' parameter in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
WordPress plugin Super Simple Contact Form 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
EUVD-2009-2547
Malware in sbrugna...
EUVD-2009-2548
Malware in sbrugna...
EUVD-2025-7984
Malicious code in bioql PyPI...
CVE-2025-30523
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marcel-NL Super Simple Subscriptions super-simple-subscriptions allows SQL Injection.This issue affects Super Simple Subscriptions: from n/a through = 1.1.0...
CVE-2025-30523 WordPress Super Simple Subscriptions plugin <= 1.1.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marcel-NL Super Simple Subscriptions super-simple-subscriptions allows SQL Injection.This issue affects Super Simple Subscriptions: from n/a through = 1.1.0...
CVE-2025-30523 WordPress Super Simple Subscriptions plugin <= 1.1.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marcel-NL Super Simple Subscriptions super-simple-subscriptions allows SQL Injection.This issue affects Super Simple Subscriptions: from n/a through = 1.1.0...
CVE-2025-30523
CVE-2025-30523 affects the WordPress plugin Super Simple Subscriptions (
WordPress Super Simple Subscriptions plugin <= 1.1.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin Super Simple Subscriptions versions = 1.1.0...
WordPress plugin Super Simple Subscriptions SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Super Simp...
WordPress Super Simple Custom CSS 1.2 Cross Site Scripting Vulnerability
WordPress Super Simple Custom CSS plugin version 1.2 suffers from a persistent cross site scripting vulnerability. Vulnerable Super Simple Custom CSS 1.2 Super Simple Custom CSS is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. A...
Super Simple Blog Script 2.5.4 - Local File Inclusion Vulnerability
No description provided by source. ----------exploit Debut Local File Inclusion Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com Email : mm : Moghla9 Ferme Closed ----------Script Info Site:http : http://www.supersimple.org/ Download :...
super simple 2.5.7 Remote SQL Injection Vulnerability
Exploit for php platform in category web applications ----------exploit Debut Remote SQL Injection Vulnerability ----------Script Info Moi : JIKO ----------Script Info Site:http : http://www.supersimple.org/ Version : V257 Download :...
Super Simple Blog Script entry Parameter SQL Injection
The remote Super Simple Blog Script install hosted on the remote web server is affected by a SQL injection vulnerability because its 'comments.php' script does not properly sanitize input to the 'entry' parameter before using it a database query. Regardless of PHP's 'magicquotesgpc' setting, an...
Super Simple Blog Script Detection
The remote host is running Super Simple Blog Script, a web-based blogging application written in PHP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid50047; scriptversion"1.9";...
CVE-2009-2553
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter...
Directory traversal
Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter...
Sql injection
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter...
CVE-2009-2553
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter...