39 matches found
CVE-2017-18612
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
EUVD-2007-4317
Malware in sbrugna...
CVE-2017-18612
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
Design/Logic Flaw
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
CVE-2017-18612: Improper Neutralization of Input During Web Page Generation
The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter...
PT-2019-8543
Name of the Vulnerable Software and Affected Versions wp-whois-domain plugin version 1.0.0 Description The issue concerns a problem with the wp-whois-domain plugin for WordPress, where there is a potential for XSS via the domain parameter in the "pages/func-whois.php" endpoint. Recommendations Fo...
WordPress Wordfence Security Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Wordfence Security is one of the security plug-ins, which provides firewalls, virus scanning, and traffic monitoring...
CVE-2014-4932
Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php...
CVE-2014-4932
Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php...
inf.ua XSS vulnerability
Open Bug Bounty ID: OBB-670201 Description| Value ---|--- Affected Website:| inf.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-4932: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php...
PT-2018-4230
Name of the Vulnerable Software and Affected Versions Wordfence Security plugin versions prior to 5.1.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the val parameter to the "whois.php" endpoint. Recommendations For versions prior...
bestname.ua XSS vulnerability
Open Bug Bounty ID: OBB-600155 Description| Value ---|--- Affected Website:| bestname.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2015-3998: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter to whois.php...
PT-2017-6718
Name of the Vulnerable Software and Affected Versions phpwhois version 4.2.5 adsense-click-fraud-monitoring plugin version 1.7.5 for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter to "whois.php" API endpoint. This can lead to...
taunus-media.de XSS vulnerability
Open Bug Bounty ID: OBB-226648 Description| Value ---|--- Affected Website:| taunus-media.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ecomsiam.com XSS vulnerability
Vulnerable URL: http://www.ecomsiam.com/whois.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3024875 VIP website status:| No Check ecomsiam.com SSL connection:| Grade: F...
tasman-webdesign.com XSS vulnerability
Vulnerable URL: http://www.tasman-webdesign.com/en/whois.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
seastarnet.com XSS vulnerability
Vulnerable URL: http://www.seastarnet.com/whois.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2423561 VIP website status:| No Check seastarnet.com SSL connection:| Grade: C+...
dnsbeans.org XSS vulnerability
Vulnerable URL: http://www.dnsbeans.org/whois.php?domain='"=Whois Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check dnsbeans.org...