infusionsoft vulnerabilities and exploits

(subscribe to this query)

The Infusionsoft Gravity Forms plugin 1.5.3 up to and including 1.5.10 for WordPress does not properly restrict access, which allows remote malicious users to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.

Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.3 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.4 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.4.1 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.4.2 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.5 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.6 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.7 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.7.1 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.7.2 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.8 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.8.1 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.9

1 EDB exploit

Reflected XSS in wordpress plugin infusionsoft v1.5.11

Infusionsoft Project Infusionsoft

Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity Forms plugin prior to 1.5.6 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) go, (2) contactId, or (...

Katz Infusionsoft Gravity Forms

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a up to and including 7.5.17.

Formlift Formlift For Infusionsoft Web Forms

novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code execution

Novaksolutions Infusionsoft-php-sdk 2016-10-31

Cross-Site Request Forgery (CSRF) vulnerability in jordan.hatch Infusionsoft Analytics allows Cross Site Request Forgery. This issue affects Infusionsoft Analytics: from n/a up to and including 2.0.

Jordan.hatch Infusionsoft Analytics

The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated malicious users to include PHP files on the server, allowing the execution o...

Infusionsoft Keap Official Opt-in Forms

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook