2013-12-19

2013-12-20

2013-12-21

All (3) Critical (1) High (3) Medium (2) Low (1)

CVE-2013-7187 HIGH POC This Week

SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi PHP Formcraft

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

2.1%

CVE-2013-7189 HIGH POC This Week

Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via the cmbdomain parameter to (1) checktransferstatus.php, (2). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Autohoster

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

1.3%

CVE-2013-6767 HIGH POC This Week

Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary code or cause a denial of service (process crash) via a long *.text value in a PE. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service RCE Antivirus Pro

NVD Exploit-DB

CVSS 2.0

7.2

EPSS

0.3%