494 matches found
w3.lexus.pt XSS vulnerability
Open Bug Bounty ID: OBB-691945 Description| Value ---|--- Affected Website:| w3.lexus.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
w3.org XSS vulnerability
Open Bug Bounty ID: OBB-613405 Description| Value ---|--- Affected Website:| w3.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
w3.org Improper Access Control vulnerability
Open Bug Bounty ID: OBB-591996 Description| Value ---|--- Affected Website:| w3.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
FS Monster Clone SQL Injection
Exploit Title: FS Monster Clone - 'id' SQL Injection Date: 2017-10-24 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/monster-clone/ Version: 24 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...
FS Monster Clone - 'id' SQL Injection
Exploit Title: FS Monster Clone - 'id' SQL Injection Date: 2017-10-24 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/monster-clone/ Version: 24 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...
myamericanfamilydentist.com XSS vulnerability
Vulnerable URL: http://www.myamericanfamilydentist.com/dev/wp-content/plugins/w3-total-cache/wp-content/view.php?file="/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...
w3.cjf.gob.mx XSS vulnerability
Vulnerable URL: http://w3.cjf.gob.mx/SevieGuardias/ConsultaGuardia.asp?organo=03-JD01-AP=1"...
JVN#79738260: Multiple vulnerabilities in WordPress plugin "WordPress Download Manager"
The WordPress plugin "WordPress Download Manager" provided by W3 Eden, Inc. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-2216 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...
WordPress W3 Total Cache Plugin Competitive Conditions Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site.W3 Total Cache is one of the blog optimization plug-ins. A competitive condition vulnerability exists in...
WordPress W3 Total Cache 0.9.4.1 Race Condition Vulnerability
An information disclosure vulnerability was found in the W3 Total Cache plugin. This issue allows an attacker to hijack sensitive information, such as the administrator's session cookie. Exploiting the vulnerability is possible during a short period of time when an administrator submits the suppo...
WordPress W3 Total Cache Amazon SNS Push Messages Weak Validation Vulnerability
A vulnerability in the validation of Amazon SNS messages was found in the W3 Total Cache plugin. This issue allows an attacker to perform a variety of actions concerning the server's cache, which may result in a denial of service attack. Version 0.9.4.1 is affected...
WordPress W3 Total Cache 0.9.4.1 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...
WordPress W3 Total Cache Amazon SNS Push Messages Weak Validation
------------------------------------------------------------------------ Weak validation of Amazon SNS push messages in W3 Total Cache WordPress Plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...
WordPress W3 Total Cache 0.9.4.1 Race Condition
------------------------------------------------------------------------ Information disclosure race condition in W3 Total Cache WordPress Plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...
WordPress W3 Total Cache 0.9.4.1 Cross Site Scripting
------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...
W3 Total Cache <= 0.9.4.1 - Weak Validation of Amazon SNS Push Messages
The W3 Total Cache WordPress plugin was affected by a Weak Validation of Amazon SNS Push Messages security vulnerability...
W3 Total Cache <= 0.9.4 - Unauthenticated Server Side Request Forgery (SSRF)
The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF security vulnerability...
WordPress W3 Total Cache Plugin <= 0.9.4.1 - Bypass
This plugin is prone to unauthenticated security token bypass vulnerability. Solution Update the plugin...