|
255871
|
9.8 |
CRITICAL
Network
|
eventr_project
|
eventr
|
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do not sanitize input, this allows for blind SQL injection via the event parameter.
|
CWE-89
SQL Injection
|
CVE-2017-1002019
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255872
|
9.8 |
CRITICAL
Network
|
eventr_project
|
eventr
|
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.
|
CWE-89
SQL Injection
|
CVE-2017-1002018
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255873
|
6.1 |
MEDIUM
Network
|
bobcares
|
gift-certificate-creator
|
Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability.
|
CWE-79
Cross-site Scripting
|
CVE-2017-1002017
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255874
|
9.8 |
CRITICAL
Network
|
flickr_picture_backup_project
|
flickr_picture_backup
|
Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2017-1002016
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255875
|
9.8 |
CRITICAL
Network
|
anblik
|
image-gallery-with-slideshow
|
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via selectMulGallery parameter.
|
CWE-89
SQL Injection
|
CVE-2017-1002015
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255876
|
9.8 |
CRITICAL
Network
|
anblik
|
image-gallery-with-slideshow
|
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via gallery_name parameter.
|
CWE-89
SQL Injection
|
CVE-2017-1002014
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255877
|
9.8 |
CRITICAL
Network
|
anblik
|
image-gallery-with-slideshow
|
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/admin_setting.php.
|
CWE-89
SQL Injection
|
CVE-2017-1002013
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255878
|
9.8 |
CRITICAL
Network
|
anblik
|
image-gallery-with-slideshow
|
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.php the following snippet of code does not sanitize input via the gid variable bef…
|
CWE-89
SQL Injection
|
CVE-2017-1002012
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255879
|
5.4 |
MEDIUM
Network
|
anblik
|
image-gallery-with-slideshow
|
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value->gallery_name and $value->gallery_description where anyone with privileges to…
|
CWE-79
Cross-site Scripting
|
CVE-2017-1002011
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255880
|
9.8 |
CRITICAL
Network
|
ontraport
|
membership_simplified
|
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize use…
|
CWE-89
SQL Injection
|
CVE-2017-1002010
|
2024-11-21 12:04 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|