Filtered by vendor Laubrotel
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-3097 | 1 Laubrotel | 1 Lbstopattack | 2022-11-29 | N/A | 6.5 MEDIUM |
The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks. This could allow attackers to disable the plugin's protections. | |||||
CVE-2010-2438 | 1 Laubrotel | 1 G.cms Generator | 2017-08-16 | 7.5 HIGH | N/A |
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php. |