15 matches found
CVE-2026-32464
Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...
EUVD-2026-60900
Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...
CVE-2026-32464 WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...
CVE-2026-32464
The WordPress plugin Theme Test Drive (versions ≤ 2.9.1) is affected by an unauthenticated Local File Inclusion vulnerability discovered by Steven Julian, allowing remote attackers to read arbitrary server files without authentication (CVSS 8.1 HIGH). Patchstack reports the flaw but no patch vers...
CVE-2026-32464 WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...
CVE-2026-32464
Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...
PT-2026-77042
Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...
WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Steven Julian in WordPress Plugin Theme Test Drive versions = 2.9.1...
CVE-2025-58884: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ivan Drago vipdrv vipdrv-vip-test-drive allows Stored XSS.This issue affects vipdrv: from n/a through = 1.0.3...
VehicleWorkshop 1.0 - (bookingid) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: VehicleWorkshop 1.0 - 'bookingid' SQL Injection Exploit Author: Mehran Feizi Vendor HomagePage: https://github.com/spiritson/VehicleWorkshop Tested on: Windows Google Dork: N/A ========= Vulnerable Page: =========...
VehicleWorkshop 1.0 - 'bookingid' SQL Injection
Exploit Title: VehicleWorkshop 1.0 - 'bookingid' SQL Injection Data: 2020-02-06 Exploit Author: Mehran Feizi Vendor HomagePage: https://github.com/spiritson/VehicleWorkshop Tested on: Windows Google Dork: N/A ========= Vulnerable Page: ========= /viewtestdrive.php ========== Vulnerable Source:...
haltonhonda.com XSS vulnerability
Vulnerable URL: http://www.haltonhonda.com/new/book-a-test-drive/?vehicleid=8293418"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerabili...
toyota.ca XSS vulnerability
Vulnerable URL: https://www.toyota.ca/toyota/en/request-test-drive?series=t86"alert/OPENBUGBOUNTY/...