408 matches found
WordPress Share This Image plugin <=1.03 - Cross-Site Scripting (XSS) vulnerability
A Cross-Site Scripting XSS vulnerability found by Neorichi in WordPress Share This Image plugin versions =1.03. Solution Update the WordPress Share This Image plugin to the latest available version at least 1.04...
WordPress ILLID Share This Image plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.ILLID Share This Image plugin is used to add a social sharing icon plugin. A cross-site scripting vulnerability...
Code injection
The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...
CVE-2017-18015
The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...
CVE-2017-18015
The CVE-2017-18015 entry concerns the WordPress plugin ILLID Share This Image (versions prior to 1.04). The underlying issue is a Cross-Site Scripting (XSS) flaw exploitable through the sharer.php URL parameter. Affected component: the Share This Image plugin for WordPress; root cause per the sou...
CVE-2017-18015
The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...
PT-2018-6611 · Illid · Illid Share This Image
Name of the Vulnerable Software and Affected Versions: ILLID Share This Image plugin versions prior to 1.04 Description: The issue concerns a cross-site scripting XSS flaw. It is exploited via the sharer.php url parameter. Recommendations: For versions prior to 1.04, update to version 1.04 or lat...
Microsoft Windows jscript!NameTbl::GetValDef Use-After-Free Exploit
Exploit for windows platform in category dos / poc Windows: use-after-free in jscript!NameTbl::GetValDef CVE-2017-11903 There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this...
WordPress Share This Image 1.03 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Share This Image 1.03 Share This Image is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
Share This Image <= 1.03 - Cross-Site Scripting (XSS)
The Share This Image WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Share This Image 1.03 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Share This Image 1.03 Share This Image is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script co...
WEM 4.3 -Folder redirection discrepancy between "Quick Access" and "This PC"
When configuring WEM USV Settings for folder redirection inside WEM Administration Console, folder redirection settings are not properly applied per settings on WEM Agent machine. FOR EXAMPLE: All of the following folders, should be redirected and have been configured this way via the WEM...
mora.edu.mx XSS vulnerability
Open Bug Bounty ID: OBB-311248 Description| Value ---|--- Affected Website:| mora.edu.mx Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Microsoft Edge Chakra - EmitAssignment uses the this Register Without Initializing
Microsoft Edge Chakra - EmitAssignment uses the this Register Without Initializing 000c ProfiledLdEnvSlot R4 = 13 Line 28: super.a = 1; Col 13: ^ 0018 LdHomeObjProto R8 R4 001d ProfiledStSuperFld R8.this=R5 = R3 0 0025 LdUndef R0 Line 29: Col 9: ^ 0027 Ret PoC: -- class Parent ; class Child exten...
WordPress Plugin I-Recommend-This SQL Injection
An SQL injection vulnerability has been reported in WordPress I-Recommend-This Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WordPress Cross-Site Request Forgery Vulnerability (CNVD-2017-03558)
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the wp-admin/includes/class-wp-press-this.php page in...
DEBIAN-CVE-2017-6819
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...
CVE-2017-6819
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...
UBUNTU-CVE-2017-6819
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...