Show filters
70 Total Results
Displaying 61-70 of 70
Sort by:
Attacker Value
Unknown
CVE-2012-6078
Disclosure Date: November 22, 2019 (last updated November 27, 2024)
W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
0
Attacker Value
Unknown
CVE-2012-6077
Disclosure Date: November 22, 2019 (last updated November 27, 2024)
W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.
0
Attacker Value
Unknown
CVE-2012-6079
Disclosure Date: November 22, 2019 (last updated November 27, 2024)
W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.
0
Attacker Value
Unknown
CVE-2019-15821
Disclosure Date: August 30, 2019 (last updated November 27, 2024)
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.
0
Attacker Value
Unknown
CVE-2019-6715
Disclosure Date: April 01, 2019 (last updated November 27, 2024)
pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.
0
Attacker Value
Unknown
CVE-2014-9414
Disclosure Date: December 24, 2014 (last updated October 05, 2023)
The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and hijack the authentication of administrators for requests that change the mobile site redirect URI via the mobile_groups[*][redirect] parameter and an empty _wpnonce parameter in the w3tc_mobile page to wp-admin/admin.php.
0
Attacker Value
Unknown
CVE-2014-8724
Disclosure Date: December 19, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for WordPress, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the "Cache key" in the HTML-Comments, as demonstrated by the PATH_INFO to the default URI.
0
Attacker Value
Unknown
CVE-2009-4731
Disclosure Date: March 18, 2010 (last updated October 04, 2023)
SQL injection vulnerability in photos.php in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allows remote attackers to execute arbitrary SQL commands via the album parameter.
0
Attacker Value
Unknown
CVE-2009-4350
Disclosure Date: December 17, 2009 (last updated October 04, 2023)
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the (1) matchings[id] or (2) matchings[title] parameters in a Login action to an unspecified program, or (3) the matchings[id] parameter in a search action to index.php, a different vector than CVE-2008-3250. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2009-3175
Disclosure Date: September 11, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id parameter to (1) view.php, (2) photos.php, and (3) motm.php; and the (4) id parameter to forum_message.php.
0
