9 matches found
EUVD-2006-0073
Malware in sbrugna...
EUVD-2021-33539
Malicious code in bioql PyPI...
CVE-2021-46889
The 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via themeid for bwgfrontenddata. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-31693...
CVE-2021-46889
The 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via themeid for bwgfrontenddata. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-31693...
CVE-2021-46889
The CVE-2021-46889 entry concerns the WordPress Photo Gallery by 10Web plugin prior to version 1.5.69, which is vulnerable to cross-site scripting via the theme_id parameter in the bwg_frontend_data AJAX action. The linked technical detail (CVE-2021-24291) confirms multiple reflected XSS vectors ...
WordPress Photo Gallery 1.5.69 Cross Site Scripting Vulnerability
WordPress Photo Gallery plugin versions 1.5.69 and below suffer from multiple reflective cross site scripting vulnerabilities. WordPress Photo Gallery 1.5.69 Cross Site Scripting Vulnerability Researcher Name: ThuraMoeMyint Twitter: https://twitter.com/mgthuramoemyint Vendor Url:...
Joomla 组件Gallery WD SQL注入漏洞
0x01 漏洞简介 Joomla 组件Gallery WD存在多处SQL注入漏洞。远程攻击者可以利用该漏洞执行任意SQL指令。该插件的下载地址是: http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd 0x02漏洞说明 2.1参数themeid存在GET型SQL注入漏洞 该漏洞利用的POC格式如下: index.php?option=comgallerywd&view=gallerybox&imageid=19&galleryid=2&themeid=1 AND...
Sql injection
SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...
[SA18273] VEGO Web Forum "theme_id" SQL Injection Vulnerability
TITLE: VEGO Web Forum "themeid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18273 VERIFY ADVISORY: http://secunia.com/advisories/18273/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VEGO Web Forum 1.x http://secunia.com/product/6722/ DESCRIPTION:...