Show filters
123 Total Results
Displaying 111-120 of 123
Sort by:
Attacker Value
Unknown
CVE-2015-9302
Disclosure Date: August 13, 2019 (last updated November 27, 2024)
The simple-fields plugin before 1.4.11 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2019-12723
Disclosure Date: July 10, 2019 (last updated November 27, 2024)
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via container_id and old_order parameters to ajax/reorder.php by an unauthenticated user.
0
Attacker Value
Unknown
CVE-2018-16281
Disclosure Date: September 21, 2018 (last updated November 27, 2024)
The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control.
0
Attacker Value
Unknown
CVE-2018-1000529
Disclosure Date: June 26, 2018 (last updated November 26, 2024)
Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.
0
Attacker Value
Unknown
CVE-2017-9419
Disclosure Date: June 15, 2017 (last updated September 25, 2024)
Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter.
0
Attacker Value
Unknown
CVE-2017-2171
Disclosure Date: May 22, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2, Custom Search prior to version 1.36, Donate prior to version 2.1.1, Email Queue prior to version 1.1.2, Error Log Viewer prior to version 1.0.6, Facebook Button prior to version 2.54, Featured Posts prior to version 1.0.1, Gallery Categories prior to version 1.0.9, Gallery prior to version 4.5.0, Google +1 prior to version 1.3.4, Google AdSense prior to version 1.44, Google Analytics prior to version 1.7.1, Google Captcha (reCAPTCHA) prior to version 1.28, Google Maps prior to version 1.3.6, Google Shortlink prior to version 1.5.3, Google Sitemap prior to version 3.0.8, Htaccess prior to version 1.7.6, Job Board prior to version 1.1.3, Latest Posts prior to version 0.3, Limit…
0
Attacker Value
Unknown
CVE-2015-3363
Disclosure Date: April 21, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the Contact Form Fields module before 6.x-2.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete fields via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-6884
Disclosure Date: January 07, 2014 (last updated October 05, 2023)
The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges.
0
Attacker Value
Unknown
CVE-2013-6881
Disclosure Date: January 07, 2014 (last updated October 05, 2023)
CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the forensic imaging task.
0
Attacker Value
Unknown
CVE-2013-6882
Disclosure Date: December 17, 2013 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote attackers to inject arbitrary web script or HTML via the username parameter in a login or (2) remote authenticated users to inject arbitrary web script or HTML via unspecified form fields.
0
