Show filters
72 Total Results
Displaying 51-60 of 72
Sort by:
Attacker Value
Unknown
CVE-2015-9297
Disclosure Date: August 13, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.6 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2015-9300
Disclosure Date: August 13, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
0
Attacker Value
Unknown
CVE-2015-9299
Disclosure Date: August 13, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
0
Attacker Value
Unknown
CVE-2018-12250
Disclosure Date: July 03, 2019 (last updated November 27, 2024)
An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL injection.
0
Attacker Value
Unknown
CVE-2018-13137
Disclosure Date: April 12, 2019 (last updated October 09, 2024)
The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=event&page=events-manager-options URI.
0
Attacker Value
Unknown
CVE-2018-1000834
Disclosure Date: December 20, 2018 (last updated November 27, 2024)
runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runscape services call that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
0
Attacker Value
Unknown
CVE-2018-13173
Disclosure Date: July 05, 2018 (last updated November 27, 2024)
The mintToken function of a smart contract implementation for EliteShipperToken (ESHIP), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
0
Attacker Value
Unknown
CVE-2018-0576
Disclosure Date: May 14, 2018 (last updated October 09, 2024)
Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2018-9020
Disclosure Date: March 26, 2018 (last updated October 09, 2024)
The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.
0
Attacker Value
Unknown
CVE-2012-5874
Disclosure Date: January 12, 2013 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATH_INFO to (a) checkuser.php, (b) groups.php, (c) index.php, (d) login.php, (e) quicklogin.php, (f) register.php, (g) Search.php, (h) viewboard.php, or (i) viewtopic.php.
0
