CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

Sql injection

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

Sql injection

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

PT-2023-27712 · Unknown · Schoolmate

Name of the Vulnerable Software and Affected Versions: Schoolmate version 1.3 Description: The issue concerns SQL Injection in the schoolname variable from the Database, located at header.php. This allows for potential exploitation. Recommendations: For Schoolmate version 1.3, consider restrictin...

CVE-2023-40944

CVE-2023-40944 affects Schoolmate 1.3 with a SQL Injection in the variable $schoolname used in the database query in header.php. The vulnerability is characterized as CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Connected sources corroborate the issue across multiple...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40944

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at \header.php...

CVE-2023-40946

Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php...

PT-2023-27714 · Unknown · Schoolmate

Name of the Vulnerable Software and Affected Versions: Schoolmate version 1.3 Description: The issue concerns SQL Injection in the ValidateLogin.php file, specifically affecting the variable $username from the SESSION. Recommendations: For Schoolmate version 1.3, consider restricting access to th...

CVE-2023-4807 POLY1305 MAC implementation corrupts XMM registers on Windows

Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X8664 processors supporting the AVX512-IFMA instructions. Impact summary: If in an application that uses...

Synology Router Manager 信息泄露漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from Synology Inc. in China. An information disclosure vulnerability exists in Synology Router Manager versions prior to 1.3 1.3.1-9346-6, which originates from the exposure of sensitive information in the cgi...

CVE-2023-35092

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Abhay Yadav Breadcrumb simple plugin = 1.3 versions...

CVE-2023-33929

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...

PT-2023-25141 · Unknown · Abhay Yadav Breadcrumb Simple Plugin

Name of the Vulnerable Software and Affected Versions: Abhay Yadav Breadcrumb simple plugin versions 1.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated administrators. This vulnerability allows an attacker to inject...

PT-2023-24575 · Unknown · Joaquín Ruiz Easy Admin Menu

Name of the Vulnerable Software and Affected Versions: Joaquín Ruiz Easy Admin Menu plugin versions = 1.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Joaquín Ruiz Easy Admin Menu...