← All credits

Pichaya Morimoto

3 vulnerability records and advisories credit this contributor.

CVE-2014-125116

HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

LimeSurvey 2.0+ - 2.06+ Unauthenticated Arbitrary File Download via Serialized Backup Payload

The Action Network plugin for WordPress is vulnerable to SQL Injection via the 'bulk-action' parameter in version 1.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i