PT-2022-23261 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS versions 5.7.94 through 5.7.97 Description: A remote code execution issue was found in the member toadmin.php file. Recommendations: For versions 5.7.94 through 5.7.97, as a temporary workaround, consider disabling access to the membe...

CVE-2014-6445

Multiple cross-site scripting XSS vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 uE or 2 uC parameter...

PT-2014-7221

Name of the Vulnerable Software and Affected Versions Contact Form 7 Integrations plugin versions 1.0 through 1.3.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via the uE or uC parameters in the includes/toAdmin.php file. This can lead to cross-site...

CVE-2014-6445: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 uE or 2 uC parameter...

WordPress Contact Form 7 Integrations Plugin <= 1.3.10 - Multiple XSS

Because of these vulnerabilities in includes/toAdmin.php, the attackers can inject arbitrary web script or HTML via the "uE" or "uC" parameter. Solution Update the plugin...