Navis DocumentCloud <0.1.1 - Cross-Site Scripting Detection

Navis DocumentCloud plugin before 0.1.1 for WordPress contains a reflected cross-site scripting vulnerability in js/window.php which allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Navis DocumentCloud plugin...

PT-2018-17509

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9 Description A SQL Injection issue exists, allowing potential exploitation through specific parameters in certain API endpoints. The issue can be exploited via the "request id" parameter in...

CVE-2015-6920

Cross-site scripting XSS vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter...

PT-2015-7404

Name of the Vulnerable Software and Affected Versions sourceAFRICA plugin version 0.1.3 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter in the js/window.php file...

CVE-2015-6920: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter...

CVE-2015-2807

The CVE-2015-2807 issue affects the WordPress Navis DocumentCloud plugin, specifically versions before 0.1.1. The vulnerability resides in the js/window.php file where the wpbase parameter is used, enabling a reflected cross-site scripting (XSS) attack. An attacker can inject arbitrary script/HTM...

PT-2015-5902

Name of the Vulnerable Software and Affected Versions Navis DocumentCloud plugin versions prior to 0.1.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter in the...

CVE-2015-2807: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter...

WordPress sourceAFRICA 0.1.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress sourceAFRICA Plugin Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sourceafrica/ Date: 2015-08-29 Tested On : Elementary Os - Firefox Software Link...

WordPress sourceAFRICA 0.1.3 Cross Site Scripting

Exploit Title : Wordpress sourceAFRICA Plugin Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sourceafrica/ Date: 2015-08-29 Tested On : Elementary Os - Firefox Software Link :...

WordPress Navis DocumentCloud Plugin <= 0.1.0 - XSS

This vulnerability is in js/window.php. It allows an attacker to inject arbitrary web script or HTML via the "wpbase" parameter. Solution Update the plugin...

CVE-2014-4575

Cross-site scripting XSS vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2014-4575: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2014-5989

Name of the Vulnerable Software and Affected Versions Wikipop plugin versions 2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter in the js/window.php file. Recommendations For Wikipop plugin versions 2.0 and...

WordPress Wikipop Plugin <= 2.0 - XSS

Because of this vulnerability in js/window.php, the attackers can inject arbitrary web script or HTML via the "s" parameter. Solution Update the plugin...

CVE-2006-5125

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function...

CVE-2006-5125

CVE-2006-5125 describes a directory traversal vulnerability in Joshua Muheim’s phpMyWebmin 1.0, where window.php (potentially used by home.php) accepts a directory name via the target parameter and triggers a directory listing through opendir. This allows remote attackers to obtain sensitive info...

CVE-2006-5125: Undefined Security Weakness

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function...

CVE-2006-5124: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 target and 2 action parameters in window.php, and possibly the 3 target parameter in home.php...

phpMyWebmin 1.0 (window.php) Remote File Include Vulnerability

No description provided by source. +PHP MyWebMin 1.0 Remote File Include +Advisory 5 +Product :PHP MyWebMin +Develop: +www.josh.ch/joshch/php-tools/phpmywebmin,download.html +Vulnerable: Remote File Includes +Risk:High +Class:Remote +Discovered:by Kernel-32 +Contact: [email protected]...