Malicious code in sol-web3-1.45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fead2025caedfc146d1352524681288e1aa9b517e0bc6fba71c09ebe034d378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7056 Malicious code in sol-web3-1.45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fead2025caedfc146d1352524681288e1aa9b517e0bc6fba71c09ebe034d378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Plugin Backup and Restore 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Patlite 缓冲区错误漏洞

Patlite is a network monitoring indicator from Patlite Japan. It is used to detect network anomalies with instant notification by light, sound and email. A buffer error vulnerability exists in Patlite versions 1.45 and earlier, which stems from the fact that it allows an attacker to implement a...

SOPlanning Authentication Bypass Vulnerability

SOPlanning is an online planning tool for efficiently organizing projects and tasks. An authentication bypass vulnerability exists in SOPlanning 1.45 - 1.47. An attacker can exploit this vulnerability to completely bypass administrator and guest user authentication by forging a valid cookie...

SOPlanning 信任管理问题漏洞

SOPlanning is an online planning tool for efficiently organizing projects and tasks. An authentication bypass vulnerability exists in SOPlanning 1.45 - 1.47. An attacker can exploit this vulnerability to completely bypass administrator and guest user authentication by forging a valid cookie...

SOPlanning Cross-Site Scripting Vulnerability

SOPlanning is an online planning tool for efficiently organizing projects and tasks. A cross-site scripting vulnerability exists in SOPlanning 1.45. An attacker can exploit this vulnerability to execute arbitrary javascript via Name or Comment in status.php...

CVE-2020-9339

SOPlanning 1.45 allows XSS via the Name or Comment to status.php...

CVE-2020-9338

SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...

CVE-2020-9338

SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...

CVE-2020-9339

SOPlanning 1.45 allows XSS via the Name or Comment to status.php...

Cross site scripting

SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...

CVE-2020-9338

SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...

CVE-2020-9339

CVE-2020-9339 affects SOPlanning 1.45. A cross-site scripting (XSS) vulnerability exists in status.php via the Name or Comment fields, allowing injected JavaScript code to be executed. Reports from multiple sources (CNVD, Red Hat, CVE list, CNVD) consistently describe XSS via Name/Comment in stat...

CVE-2020-9339

SOPlanning 1.45 allows XSS via the Name or Comment to status.php...

CVE-2020-9268

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

CVE-2020-9269

SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by exportical.php...

CVE-2020-9267

SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajaxserver.php...

CVE-2020-9266

SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajaxserver.php...

Sql injection

SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by exportical.php...