Show filters
47 Total Results
Displaying 41-47 of 47
Sort by:
Attacker Value
Unknown
CVE-2019-19110
Disclosure Date: June 15, 2020 (last updated February 21, 2025)
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.
0
Attacker Value
Unknown
CVE-2018-16613
Disclosure Date: June 19, 2019 (last updated November 27, 2024)
An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the forum administrator without any form of user interaction.
0
Attacker Value
Unknown
CVE-2018-12702
Disclosure Date: June 25, 2018 (last updated November 26, 2024)
The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."
0
Attacker Value
Unknown
CVE-2018-11709
Disclosure Date: June 04, 2018 (last updated November 26, 2024)
wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.
0
Attacker Value
Unknown
CVE-2018-11515
Disclosure Date: May 28, 2018 (last updated November 26, 2024)
The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.
0
Attacker Value
Unknown
CVE-2007-2808
Disclosure Date: May 22, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.
0
Attacker Value
Unknown
CVE-2001-0808
Disclosure Date: December 06, 2001 (last updated February 22, 2025)
gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.
0
