82 matches found
EUVD-2023-60557
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
PT-2026-31729
Joomla VirtueMart Shopping-Cart 4.0.12 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft malicious URLs containing script payloads in the keyword parameter of the product-variants...
VirtueMart 安全漏洞
VirtueMart is an open source e-commerce application from VirtueMart, Inc. designed to be used as an extension to Mambo or Joomla! A security vulnerability exists in VirtueMart versions 1.0.0 through 4.4.10, which stems from an unauthenticated reflected cross-site scripting attack...
EUVD-2010-4887
Malware in sbrugna...
EUVD-2009-2012
Malware in sbrugna...
EUVD-2010-4872
Malware in sbrugna...
EUVD-2009-2013
Malware in sbrugna...
EUVD-2009-2016
Malware in sbrugna...
EUVD-2009-2017
Malware in sbrugna...
EUVD-2009-2015
Malware in sbrugna...
CVE-2024-4034
The Virtue theme for WordPress is vulnerable to Stored Cross-Site Scripting via a Post Author's name in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping when the latest posts feature is enabled on the homepage. This makes it possible for...
CVE-2024-4034
The CVE-2024-4034 entry concerns the Virtue WordPress theme. A Stored Cross-Site Scripting vulnerability exists in all versions up to and including 3.4.8 due to insufficient input sanitization and output escaping when the homepage’s latest posts feature is enabled. Exploitation requires authentic...
CVE-2024-4034 Virtue <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
The Virtue theme for WordPress is vulnerable to Stored Cross-Site Scripting via a Post Author's name in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping when the latest posts feature is enabled on the homepage. This makes it possible for...
WordPress Plugin Virtue 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-28815 · WordPress · Virtue
Name of the Vulnerable Software and Affected Versions: Virtue theme for WordPress versions up to, and including, 3.4.8 Description: The issue is related to Stored Cross-Site Scripting via a Post Author's name due to insufficient input sanitization and output escaping when the latest posts feature...
WordPress Virtue theme <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Post Author vulnerability discovered by stealthcopter in WordPress Theme Virtue versions = 3.4.8...
WordPress Virtue Theme <= 3.4.8 is vulnerable to Cross Site Scripting (XSS)
Software Virtue Type Theme Vulnerable versions = 3.4.8 Fixed in 3.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4034 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ec8a02debee1 Credits stealthcopter Required privilege...
virtue news (sql/xss) Multiple Vulnerabilities
No description provided by source. Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR------------------------------- Virtue News...
CVE-2010-4923
SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...
Sql injection
SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...