3918 matches found
Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection
Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection Exploit Title: Joomla! Component Ultimate Property Listing v1.0.2 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://faboba.com/ Software:...
WordPress Ultimate Affiliate Pro Plugin Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Ultimate Affiliate Pro plugin. An attacker can exploit this...
WordPress Ultimate Affiliate Pro 3.6 Cross Site Scripting
Exploit Title: Ultimate Affiliate Pro WordPress Plugin Edit Account. Write the payload in the 'Last Name' input area: jaVasCript:/-///'/"/// /oNMouseoVer=alertdocument.domain Other fields may be vulnerable. Authenticated Stored XSS: Logged as an affiliate, a low privileged user. Marketing...
WordPress Ultimate Affiliate Pro plugin <=3.6 - Authenticated Stored Cross-site scripting (XSS) vulnerability
Authenticated Stored Cross-site scripting XSS vulnerability found by 8bitsec in premium WordPress Ultimate Affiliate Pro plugin version 3.6 and earlier versions. Cross-site scripting possible when logged in as an affiliate. Solution 2017.07.29 - We were unable to find information about patched...
WordPress Shortcodes Ultimate Plugin Authenticated Directory Traversal (CVE-2017-2245)
A directory traversal vulnerability exists in WordPress Shortcodes Ultimate Plugin. An authenticated user with admin privileges could exploit this vulnerability by sending specially crafted requests. Successful exploitation may result in an information disclosure...
CVE-2017-11181
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...
Cross site scripting
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...
CVE-2017-11181
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...
Cross site scripting
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...
CVE-2017-11182
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...
RISE Ultimate Project Manager 'Messaging' Cross-Site Scripting Vulnerability
Rise Ultimate Project Manager is a web-based project management system with a messaging section. A cross-site scripting vulnerability exists in the Subject and Message fields of the Messaging section in Rise Ultimate Project Manager version 1.8. A remote attacker can exploit this vulnerability to...
RISE Ultimate Project Manager Cross-Site Scripting Vulnerability
Rise Ultimate Project Manager is a web-based project management system, of which the My Profile section is a profile module. A cross-site scripting vulnerability exists in the input field of the My Profile section in Rise Ultimate Project Manager version 1.8. A remote attacker can use this...
CVE-2017-11181
Rise Ultimate Project Manager v1.8 contains a cross-site scripting (XSS) vulnerability in the Messaging section, specifically the Subject and Message fields. The CNVD entry indicates this can be exploited remotely by injecting arbitrary web script or HTML. No remediation details are provided in t...
CVE-2017-11182
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...
CVE-2017-11182
Rise Ultimate Project Manager v1.8 contains cross-site scripting (XSS) vulnerabilities in the My Profile input fields. All input fields are vulnerable, enabling injection of arbitrary script/HTML. The CVE notes an XSS issue but does not provide exploitation status, impact depth beyond the stated ...
CVE-2017-11181
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable...
Rise Ultimate Project Manager 1.8 Cross Site Scripting
Exploit Title: Rise Ultimate Project Manager - Authenticated XSS Date: 2017-07-10 Exploit Author: 8bitsec Vendor Homepage: http://rise.fairsketch.com/ Software Link: https://codecanyon.net/item/rise-ultimate-project-manager/15455641 Version: 1.8 Tested on: Kali Linux 2.0 | Mac OS 10.12.5 Email:...
CVE-2017-2245
Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors...