add metadata
parent
ea20ad232b
commit
52c71d0f5d
|
@ -7,6 +7,7 @@ info:
|
|||
description: |
|
||||
The plugin does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress
|
||||
powered site. This includes details of even privately published posts and password protected posts with their passwords revealed in plain text.
|
||||
remediation: Fixed in 0.2.4
|
||||
reference:
|
||||
- https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a
|
||||
- https://packetstormsecurity.com/files/132693/
|
||||
|
@ -20,7 +21,8 @@ info:
|
|||
metadata:
|
||||
max-request: 2
|
||||
verified: true
|
||||
tags: cve,cve2015,wordpress,wp,wp-plugin,access,control,unauth
|
||||
google-query: inurl: "/wp-content/plugins/wp-attachment-export/"
|
||||
tags: cve,cve2015,wordpress,wp,wp-plugin,unauth,wp-attachment-export,wpscan
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
|
|
|
@ -15,11 +15,11 @@ info:
|
|||
cvss-score: 9.8
|
||||
cve-id: CVE-2018-7282
|
||||
cwe-id: CWE-89
|
||||
cpe: cpe:2.3:a:titool:printmonitor:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: "true"
|
||||
shodan-query: title:"PrintMonitor"
|
||||
max-request: 1
|
||||
cpe: cpe:2.3:a:titool:printmonitor:*:*:*:*:*:*:*:*
|
||||
vendor: titool
|
||||
product": printmonitor
|
||||
tags: cve,cve2018,sqli,printmonitor,unauth
|
||||
|
|
|
@ -6,13 +6,20 @@ info:
|
|||
severity: medium
|
||||
description: |
|
||||
The Gallery PhotoBlocks WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability.
|
||||
remediation: Fixed in 1.1.43
|
||||
reference:
|
||||
- https://wpscan.com/vulnerability/9443
|
||||
- https://wpscan.com/vulnerability/b8d1d88e-f2e5-4212-af34-c91f563f07b6/
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2019-15829
|
||||
- https://wordpress.org/plugins/photoblocks-grid-gallery/
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
|
||||
cvss-score: 4.8
|
||||
cwe-id: CWE-79
|
||||
metadata:
|
||||
max-request: 2
|
||||
verified: true
|
||||
tags: cve,cve2023,wp,wordpress,wp-plugin,photoblocks-gallery,xss,authenticated
|
||||
publicwww-query: "/wp-content/plugins/photoblocks-grid-gallery/"
|
||||
tags: cve,cve2023,wp,wordpress,wp-plugin,photoblocks-gallery,xss,authenticated,wpscan
|
||||
|
||||
http:
|
||||
- raw:
|
||||
|
|
|
@ -1,4 +1,5 @@
|
|||
id: CVE-2021-25079
|
||||
|
||||
info:
|
||||
name: Contact Form Entries < 1.2.4 - Cross-Site Scripting
|
||||
author: r3Y3r53
|
||||
|
@ -10,9 +11,14 @@ info:
|
|||
- https://wpscan.com/vulnerability/c3d49271-9656-4428-8357-0d1d77b7fc63
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2021-25079
|
||||
- https://wordpress.org/plugins/contact-form-entries/
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
||||
cvss-score: 6.1
|
||||
cwe-id: CWE-79
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 2
|
||||
google-query: inurl: "/wp-content/plugins/contact-form-entries/"
|
||||
tags: cve,cve2021,wordpress,wp-plugin,wpscan,authenticated,contact-form-entries,xss
|
||||
|
||||
http:
|
||||
|
|
|
@ -19,7 +19,8 @@ info:
|
|||
metadata:
|
||||
verified: true
|
||||
max-request: 2
|
||||
tags: cve,cve2022,xss,ditty,wp,wordpress,wpscan,wp-plugin,authenticated
|
||||
publicwww-query: "/wp-content/plugins/ditty-news-ticker/"
|
||||
tags: cve,cve2022,xss,ditty-news-ticker,wp,wordpress,wpscan,wp-plugin,authenticated
|
||||
|
||||
http:
|
||||
- raw:
|
||||
|
|
|
@ -18,7 +18,9 @@ info:
|
|||
cwe-id: CWE-89
|
||||
metadata:
|
||||
verified: true
|
||||
tags: cve,cve2022,wordpress,wp-plugin,wp,commonsbooking,sqli
|
||||
google-query: inurl: /wp-content/plugin/commonsbooking/
|
||||
max-request: 1
|
||||
tags: cve,cve2022,wordpress,wp-plugin,wp,commonsbooking,sqli,wpscan
|
||||
|
||||
http:
|
||||
- raw:
|
||||
|
|
|
@ -20,6 +20,7 @@ info:
|
|||
metadata:
|
||||
verified: true
|
||||
max-request: 1
|
||||
shodan-query: http.favicon.hash:780351152
|
||||
tags: cve,cve2023,microweber,xss,unauth
|
||||
|
||||
http:
|
||||
|
|
|
@ -18,6 +18,8 @@ info:
|
|||
cpe: cpe:2.3:a:basixonline:nex-forms:*:*:*:*:*:wordpress:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
publicwww-query: "/wp-content/plugins/nex-forms-express-wp-form-builder/"
|
||||
max-request: 1
|
||||
tags: cve,cve2022,wordpress,sqli,wp-plugin,wp,wpscan,authenticated
|
||||
|
||||
http:
|
||||
|
|
|
@ -18,6 +18,7 @@ info:
|
|||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
shodan-query: http.favicon.hash:780351152
|
||||
tags: xss,cve,cve2023,microweber
|
||||
|
||||
http:
|
||||
|
|
|
@ -17,6 +17,8 @@ info:
|
|||
cwe-id: CWE-89
|
||||
metadata:
|
||||
verified: "true"
|
||||
publicwww-query: "/wp-content/plugins/wp-user/"
|
||||
max-request: 2
|
||||
tags: cve,cve2022,sqli,wpscan,wordpress,wp-plugin,wp,wp-user,unauth
|
||||
|
||||
http:
|
||||
|
|
|
@ -17,6 +17,8 @@ info:
|
|||
cwe-id: CWE-89
|
||||
metadata:
|
||||
verified: true
|
||||
publicwww-query: "/wp-content/plugins/video-list-manager/"
|
||||
max-request: 1
|
||||
tags: cve,cve2023,sqli,wordpress,wp-plugin,wp,authenticated
|
||||
|
||||
http:
|
||||
|
|
|
@ -18,6 +18,7 @@ info:
|
|||
metadata:
|
||||
max-request: 2
|
||||
verified: true
|
||||
publicwww-query: "/wp-content/plugins/companion-sitemap-generator/"
|
||||
tags: cve,cve2023,wpscan,wp,wordpress,wp-scan,xss,authenticated
|
||||
|
||||
http:
|
||||
|
|
|
@ -12,6 +12,7 @@ info:
|
|||
metadata:
|
||||
max-request: 1
|
||||
verified: true
|
||||
publicwww-query: "/wp-content/plugins/newsletter/"
|
||||
tags: cve,cve2023,wordpress,wp,wp-plugin,xss,newsletter,authenticated
|
||||
|
||||
http:
|
||||
|
|
|
@ -1,8 +1,8 @@
|
|||
id: CVE-2023-37728
|
||||
|
||||
info:
|
||||
name: Icewarp Icearp v10.2.1 - Cross Site Scripting
|
||||
author: r3Y3r53
|
||||
name: IceWarp Webmail Server v10.2.1 - Cross Site Scripting
|
||||
author: technicaljunkie,r3Y3r53
|
||||
severity: medium
|
||||
description: |
|
||||
Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.
|
||||
|
@ -12,7 +12,11 @@ info:
|
|||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
||||
cvss-score: 6.1
|
||||
cve-id: CVE-2023-37728
|
||||
cwe-id: CWE-79
|
||||
epss-score: 0.00052
|
||||
epss-percentile: 0.18493
|
||||
cpe: cpe:2.3:a:icewarp:icewarp:10.2.1:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
max-request: 2
|
||||
verified: true
|
||||
|
|
Loading…
Reference in New Issue