|
283021
|
- |
|
polldaddy_polls_\&_ratings_plugin_project
|
polldaddy_polls_\&_ratings
|
Cross-site scripting (XSS) vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ra…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4856
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283022
|
- |
|
polylang_plugin_project
|
polylang
|
Cross-site scripting (XSS) vulnerability in the Polylang plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a user description. N…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4855
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283023
|
- |
|
smartcatdesign
|
wp_contruction_mode
|
Cross-site scripting (XSS) vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wuc_logo parameter in a save actio…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4854
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283024
|
- |
|
opendocman
|
opendocman
|
Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name of an uploaded file.
|
CWE-79
Cross-site Scripting
|
CVE-2014-4853
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283025
|
- |
|
thedigitalcraft
|
atomcms
|
SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2014-4852
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283026
|
- |
|
foecms
|
foecms
|
Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the r parameter.
|
NVD-CWE-Other
|
CVE-2014-4851
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283027
|
- |
|
foecms
|
foecms
|
SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter.
|
CWE-89
SQL Injection
|
CVE-2014-4850
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283028
|
- |
|
foecms
|
foecms
|
Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote attackers to inject arbitrary web script or HTML via the (1) e or (2) r parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2014-4849
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283029
|
- |
|
blogstand_banner_plugin_project
|
blogstand-smart-banner
|
Cross-site scripting (XSS) vulnerability in the Blogstand Banner (blogstand-smart-banner) plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the bs_blog_id pa…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4848
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283030
|
- |
|
buffercode
|
random_banner
|
Cross-site scripting (XSS) vulnerability in the Random Banner plugin 1.1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the buffercode_RBanner_url_banner1 parame…
|
CWE-79
Cross-site Scripting
|
CVE-2014-4847
|
2024-11-21 11:10 |
2014-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|