Subscribe via feed.
Archive for November, 2016

Schoolhos CMS v2.29 – userberita SQL injection Vulnerability

Posted by deepcore under exploit (No Respond)

The vulnerability laboratory core research team discovered a remote sql-injection vulnerability in the official Schoolho…

Red Jasmin 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Red Jasmin version 1.0 suffers from a remote SQL injection vulnerability.

WordPress MailChimp 4.0.7 Cross Site Request Forgery / Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress MailChimp plugin version 4.0.l7 suffers from cross site request forgery and cross site scripting vulnerabilities.

FTPShell Client 5.24 PWD Remote Buffer Overflow

Posted by deepcore under exploit (No Respond)

FTPShell Client version 5.24 PWD remote buffer overflow exploit.

WordPress Check Email 0.3 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Check Email plugin version 0.3 suffers from a cross site scripting vulnerability.

WordPress Easy Facebook Like Box 4.3.0 CSRF / XSS

Posted by deepcore under exploit (No Respond)

WordPress Easy Facebook Like Box plugin version 4.3.0 suffers from cross site request forgery and cross site scripting vulnerabilities.

WordPress Huge IT Portfolio Gallery 2.0.77 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Huge IT Portfolio Gallery plugin version 2.0.77 suffers from a cross site scripting vulnerability.

WordPress Instagram Feed 1.4.6.2 Cross Site Scripting / Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

WordPress Instagram Feed plugin version 1.4.6.2 suffers from cross site request forgery and cross site scripting vulnerabilities.

WordPress Canvas – Shortcodes 1.92 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Canvas – Shortcodes plugin version 1.92 suffers from a persistent cross site scripting vulnerability.

Joomla K2 2.7.1 Shell Upload / Cross Site Request Forgery

Posted by deepcore under exploit (No Respond)

Joomla K2 extension versions 2.5.0 through 2.7.1 suffer from cross site request forgery and remote shell upload vulnerabilities.