CVE-2017-12131

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens...

CVE-2017-12131

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens...

CVE-2017-12131

The CVE-2017-12131 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress Easy Testimonials plugin, version 3.0.4. The flaw exists in include/settings/display.options.php and is demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial ...

CVE-2017-12131: Improper Neutralization of Input During Web Page Generation

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens...

PT-2017-12356

Name of the Vulnerable Software and Affected Versions Easy Testimonials plugin version 3.0.4 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is demonstrated through the Default Testimonials Width, View More Testimonials Link, and Testimonial...

besthandsusa.com XSS vulnerability

Open Bug Bounty ID: OBB-255441 Description| Value ---|--- Affected Website:| besthandsusa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress WP-Testimonials Plugin SQL Injection Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on PHP and MySQL servers.WP-Testimonials plugin is one of the plugins that can be used to add 'testimonials' to the sidebar or any page/post...

WordPress WP-Testimonials Plugin < 3.4.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage:...

CVE-2017-9418

SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php...

Sql injection

SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php...

CVE-2017-9418

SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php...

CVE-2017-9418

CVE-2017-9418 is a SQL injection vulnerability in the WordPress WP-Testimonials plugin version 3.4.1. An authenticated user can exploit the testid parameter in wp-admin/admin.php to execute arbitrary SQL commands. Public PoCs and exploits demonstrate union-based payloads and version disclosure, i...

CVE-2017-9418: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php...

PT-2017-18907

Name of the Vulnerable Software and Affected Versions WP-Testimonials plugin version 3.4.1 Description The issue allows an authenticated user to execute arbitrary SQL commands. This is achieved via the testid parameter to the "wp-admin/admin.php" endpoint. Recommendations For WP-Testimonials plug...

WordPress WP-Testimonials SQL Injection

Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage: http://www.sunfrogservices.com/web-programmer/wp-testimonials/ Version: 3.4.1...

WordPress WP-Testimonials plugin <=3.4.1 - SQL Injection vulnerability

WordPress WP-Testimonials plugin is prone to SQL injection vulnerability. The vulnerability allows an authenticated user to execute arbitrary SQL commands via the "testid" parameter to wp-admin/admin.php Solution WordPress WP-Testimonials plugin removed from WordPress plugin directory. We suggest...

WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection

Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage: http://www.sunfrogservices.com/web-programmer/wp-testimonials/ Version: 3.4.1...

WP-Testimonials - Authenticated SQL Injection

Researcher tested version 3.4.1. Plugin removed from WordPress directory...

PT-2017-15230

Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...

MLM Binary Plan Script 2.0.5 - SQL Injection

MLM Binary Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Binary Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-binary-plan-script/ Demo: http://74.124.215.220/binamlm/...