Le Ngoc Anh

The software contains an Improper Control of Filename for Include/Require Statement ('PHP Remote File Inclusion') issue, allowing PHP Local File Inclusion.

The software contains an Improper Control of Filename for Include/Require Statement, specifically a PHP Local File Inclusion issue.

The software contains an Improper Control of Filename for Include/Require Statement, leading to a PHP Local File Inclusion issue.

A PHP Local File Inclusion issue exists in WPInterface BlogMarks due to improper control of filename for include/require statements. This allows for potential exploitation through PHP Remote File Inclusion.

The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion.

Name of the Vulnerable Software and Affected Versions: WP SmartPay versions 2.7.13 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing authentication abuse. Recommendations: For WP SmartPay versions 2.7.13 and earlier, update to a version later than 2.7.13 to resolve the issue.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks.

The issue is related to weak authentication, allowing privilege escalation.

The issue is related to an SQL Injection flaw, which is caused by the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks.

The issue is related to Deserialization of Untrusted Data, which allows Object Injection.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject malicious scripts into the website, potentially stealing user data or taking control of user sessions.

Name of the Vulnerable Software and Affected Versions: GoodBarber versions n/a through 1.0.26 Description: The software contains a URL Redirection to Untrusted Site ('Open Redirect') issue. This allows an attacker to redirect users to a malicious website. Recommendations: Update GoodBarber to a version later than 1.0.26.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks.

The issue is related to an Improper Control of Generation of Code ('Code Injection') vulnerability, which allows Remote Code Inclusion. This means that an attacker could potentially inject malicious code into the system, leading to unauthorized access or control.

The issue is related to Deserialization of Untrusted Data, which allows Object Injection.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in WP Easy Poll.

The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject malicious scripts into a website, potentially stealing user data or taking control of user sessions.

The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicious scripts into web pages.