755 matches found
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Torbjon Infogram – Add charts, maps and infographics allows Stored XSS.This issue affects Infogram – Add charts, maps and infographics: from n/a through 1.6.1...
CVE-2023-46351
In the module mib 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The methods mib::getManufacturersByCategory has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...
PT-2024-13355 · Unknown · Prestashop
Name of the Vulnerable Software and Affected Versions: mib module for PrestaShop versions prior to 1.6.1 Description: The issue allows a guest to perform SQL injection. The methods mib::getManufacturersByCategory contain sensitive SQL calls that can be executed with a trivial HTTP call and...
WBCE CMS 1.6.1 Shell Upload Vulnerability
Exploit Title: WBCE CMS Version : 1.6.1 Remote Command Execution Exploit Author: tmrswrr Vendor Homepage: https://wbce-cms.org/ Software Link: https://github.com/WBCE/WBCECMS/archive/refs/tags/1.6.1.zip Version: 1.6.1 Tested on: https://www.softaculous.com/apps/cms/WBCECMS POC: 1 Login with admin...
WBCE CMS 1.6.1 Shell Upload
Exploit Title: WBCE CMS Version : 1.6.1 Remote Command Execution Date: 30/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://wbce-cms.org/ Software Link: https://github.com/WBCE/WBCECMS/archive/refs/tags/1.6.1.zip Version: 1.6.1 Tested on: https://www.softaculous.com/apps/cms/WBCECMS POC: 1...
CVE-2023-44143
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns allows Stored XSS.This issue affects Bamboo Columns: from n/a through 1.6.1...
CVE-2023-26533
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.1...
PT-2023-20709 · Zippy · Zippy
Name of the Vulnerable Software and Affected Versions: Zippy versions 1.6.1 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have access to it...
PT-2023-29127 · Unknown · Bamboo Columns
Name of the Vulnerable Software and Affected Versions: Bamboo Columns versions through 1.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious script...
PT-2023-32607 · Unknown · Jeecgboot Jimureport
Name of the Vulnerable Software and Affected Versions: jeecgboot JimuReport versions up to 1.6.1 Description: A critical vulnerability was found in jeecgboot JimuReport, affecting an unknown functionality of the file /download/image. The manipulation of the imageUrl argument leads to relative pat...
JeecgBoot JimuReport Security Vulnerability
JeecgBoot is a Chinese Java low-code platform for enterprise web applications. A security vulnerability exists in JeecgBoot JimuReport version 1.6.1 and prior versions, which stems from an incorrect manipulation of the parameter imageUrl that can lead to relative path traversal...
CVE-2023-47812
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...
CVE-2023-32501
Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.6.1 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.6.1 versions...
PT-2023-23835 · E4J S.R.L. · Vikbooking Hotel Booking Engine & Pms
Name of the Vulnerable Software and Affected Versions: E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin versions = 1.6.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web applicatio...
CVE-2023-46088
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...
CVE-2023-46088
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...
CVE-2023-46088 WordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...
PT-2023-29837 · WordPress · Mammothology Wp Full Stripe Free
Name of the Vulnerable Software and Affected Versions: Mammothology WP Full Stripe Free plugin versions 1.6.1 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts...