Show filters
114 Total Results
Displaying 81-90 of 114
Sort by:
Attacker Value
Unknown
CVE-2017-18502
Disclosure Date: August 12, 2019 (last updated November 27, 2024)
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
0
Attacker Value
Unknown
CVE-2017-2171
Disclosure Date: May 22, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2, Custom Search prior to version 1.36, Donate prior to version 2.1.1, Email Queue prior to version 1.1.2, Error Log Viewer prior to version 1.0.6, Facebook Button prior to version 2.54, Featured Posts prior to version 1.0.1, Gallery Categories prior to version 1.0.9, Gallery prior to version 4.5.0, Google +1 prior to version 1.3.4, Google AdSense prior to version 1.44, Google Analytics prior to version 1.7.1, Google Captcha (reCAPTCHA) prior to version 1.28, Google Maps prior to version 1.3.6, Google Shortlink prior to version 1.5.3, Google Sitemap prior to version 3.0.8, Htaccess prior to version 1.7.6, Job Board prior to version 1.1.3, Latest Posts prior to version 0.3, Limit…
0
Attacker Value
Unknown
CVE-2015-0890
Disclosure Date: March 03, 2015 (last updated October 05, 2023)
The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-9283
Disclosure Date: March 03, 2015 (last updated October 05, 2023)
The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.
0
Attacker Value
Unknown
CVE-2010-2359
Disclosure Date: June 21, 2010 (last updated October 04, 2023)
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, a different vector than CVE-2007-1706.
0
Attacker Value
Unknown
CVE-2009-4464
Disclosure Date: December 30, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
0
Attacker Value
Unknown
CVE-2009-4437
Disclosure Date: December 28, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1.
0
Attacker Value
Unknown
CVE-2009-4436
Disclosure Date: December 28, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706.
0
Attacker Value
Unknown
CVE-2009-4229
Disclosure Date: December 08, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter in the PATH_INFO to the default URI or (2) the catid parameter to default.asp. NOTE: this might overlap CVE-2009-0429.3. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2008-6889
Disclosure Date: August 03, 2009 (last updated October 04, 2023)
SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.
0
