2184 matches found
Ultimate Member <= 2.0 - Multiple XSS
The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Multiple XSS security vulnerability...
Cross site scripting
Cross Site Scripting XSS exists in PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2 via a user profile update parameter...
Cross-site Scripting (XSS)
github.com/koding/koding is vulnerable to cross-site scripting XSS attacks. The application does not properly encode the about field in a user's profile, allowing a malicious user to inject and execute arbitrary Javascript...
Mavenlink: Users email can be changed without verification
A user api endpoint that accepts updates for user profile information also accepts an email address field. The researcher found a bug where a previously verified email address could be updated via this endpoint but would not be marked as unverified. This endpoint still accepts email address chang...
CVE-2017-17891
Readymade Video Sharing Script has CSRF via user-profile-edit.php...
CVE-2017-17891
Readymade Video Sharing Script has CSRF via user-profile-edit.php...
CVE-2017-17893
Readymade Video Sharing Script has XSS via the searchvideo.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter...
CVE-2017-17893
Readymade Video Sharing Script has XSS via the searchvideo.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter...
Design/Logic Flaw
Readymade Video Sharing Script has XSS via the searchvideo.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter...
Cross site request forgery (csrf)
Readymade Video Sharing Script has CSRF via user-profile-edit.php...
CVE-2017-17891
Readymade Video Sharing Script has CSRF via user-profile-edit.php...
CVE-2017-17903
FS Lynda Clone has CSRF via user/editprofile, as demonstrated by adding content to the user panel...
CVE-2017-17891
CVE-2017-17891 affects Readymade Video Sharing Script. The vulnerability is a cross-site request forgery (CSRF) in the user-profile-edit.php endpoint. According to CNVD-2018-01938 and corroborating sources, a remote attacker can lure a logged‑in user to trigger changes to sensitive settings via t...
CVE-2017-17893
Readymade Video Sharing Script has XSS via the searchvideo.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter...
CVE-2017-17891
Readymade Video Sharing Script has CSRF via user-profile-edit.php...
CVE-2017-17893
The following CVE concerns the Readymade Video Sharing Script (PHP Scripts Mall). It has a stored/reflected Cross‑Site Scripting (XSS) vulnerability exploitable via user input parameters: search_video.php using the search parameter, viewsubs.php using the chnlid parameter, and user-profile-edit.p...
PHP Scripts Mall Consumer Complaints Clone Script SQL Injection Vulnerability
PHP Scripts Mall Consumer Complaints Clone Script is a set of PHP based consumer online complaints and reviews website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Consumer Complaints Clone Script version 1.0. A remote attacker can exploit the...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...