click project click - vulnerabilities and exploits

(subscribe to this query)

NA

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in lierdakil click-reminder. It has been rated as critical. This issue affects the function db_query of the file src/backend/include/BaseAction.php. The manipulation leads to sql injection. The identifier of the patch is 4...

Click-reminder Project Click-reminder

NA

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <= 1.1.7 versions.

Alfred24 Click \\& Collect Project Alfred24 Click \\& Collect

7.5

CVSSv2

The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and previous versions for WordPress allows remote malicious users to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php.

Ezpz-one-click-backup Project Ezpz-one-click-backup

5.8

CVSSv2

The One Click Plugin Updater WordPress plugin up to and including 2.4.14 does not have CSRF check in place when updating its settings, which could allow malicious users to make a logged in admin change them via a CSRF attack and disable / hide the badge of the available updates a...

One Click Plugin Updater Project One Click Plugin Updater

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the External links click statistics (outstats) extension 0.0.3 and previous versions for TYPO3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

External Links Click Statistics Project External Links Click Statistics

7.5

CVSSv2

click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote malicious users to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu ph...

Click Project Click -Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.04

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote malicious users to inject arbitrary web script or HTML via the query parameter to whois.php.

Clickfraud-monitoring Adsense-click-fraud-monitoring 1.7.5 Phpwhois Project Phpwhois 4.2.5

5.8

CVSSv2

textview_uri_security_check in textview.c in Claws Mail prior to 3.18.0, and Sylpheed up to and including 3.7.0, does not have sufficient link checks before accepting a click.

Claws-mail Claws-mail Sylpheed Project Sylpheed Fedoraproject Fedora 33 Fedoraproject Fedora 34

NA

Cross Site Scripting (XSS) vulnerability in xiweicheng TMS v.2.28.0 allows a remote malicious user to execute arbitrary code via a crafted script to the click here function.

Teamwork Management System Project Teamwork Management System 2.28.0

6.8

CVSSv2

In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them to take over the appli...

Calibre-web Project Calibre-web

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook