CVE-2024-10003

creationtimestamp| type| source ---|---|--- 2024-10-22 07:55:36+00:00| seen| https://t.me/cvedetector/8591...

CVE-2024-10003 Rover IDX <= 3.0.0.2903 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3.0.0.2903. This makes it possible for authenticated attackers, with subscriber-level access and...

WordPress Rover IDX Plugin <= 3.0.0.2903 is vulnerable to Broken Access Control

Software Rover IDX Type Plugin Vulnerable versions = 3.0.0.2903 Fixed in 3.0.0.2905 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10003 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 2b090aab193c Credits István Márton Required...

CVE-2005-10003

creationtimestamp| type| source ---|---|--- 2024-10-17 16:38:46+00:00| seen| https://t.me/cvedetector/8186...

RHEL 5 : squid (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code...

CVE-2007-10003

creationtimestamp| type| source ---|---|--- 2023-10-30 02:53:32+00:00| seen| https://t.me/cibsecurity/73118...

CVE-2007-10003

The CVE-2007-10003 entry concerns The Hackers Diet Plugin for WordPress (up to version 0.9.6b). The vulnerability affects the ajax_blurb.php component of the HTTP POST Request Handler, where manipulation of the user parameter leads to SQL injection. Exploitation is remote possible. Remediation is...

Amazon Linux 2 : squid (ALAS-2023-2066)

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2066 advisory. Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed...

Important: squid

Issue Overview: Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients. CVE-2016-10003 Affected Packages:...

CVE-2008-10003

creationtimestamp| type| source ---|---|--- 2023-03-05 07:50:53+00:00| seen| https://t.me/cibsecurity/59428...

CVE-2008-10003

The CVE-2008-10003 entry concerns iGamingModules flashgames v1.1.0. The vulnerability affects an unknown function in game.php where manipulating the lid parameter leads to SQL injection, potentially exploitable remotely. The issue is mitigated by applying the patch named 6e57683704885be32eea2ea61...

CVE-2011-10003 XpressEngine Update Query sql injection

A vulnerability was found in XpressEngine up to 1.4.4. It has been rated as critical. This issue affects some unknown processing of the component Update Query Handler. The manipulation leads to sql injection. Upgrading to version 1.4.5 is able to address this issue. The patch is named...

CVE-2011-10003

CVE-2011-10003 affects XpressEngine up to version 1.4.4. The issue arises from an unknown processing flaw in the Update Query Handler that enables a SQL injection. The vulnerability is fixed by upgrading to version 1.4.5, with the patch identified as c6e94449f21256d6362450b29c7847305e756ad5. Seve...

CVE-2009-10003

creationtimestamp| type| source ---|---|--- 2023-01-29 22:36:29+00:00| seen| https://t.me/cibsecurity/57135...

CVE-2009-10003

Capnsquarepants Wordcraft

CVE-2010-10003

creationtimestamp| type| source ---|---|--- 2023-01-04 12:18:06+00:00| seen| https://t.me/cibsecurity/55857...

CVE-2010-10003 gesellix titlelink plugin_content_title.php sql injection

A vulnerability classified as critical was found in gesellix titlelink on Joomla. Affected by this vulnerability is an unknown functionality of the file plugincontenttitle.php. The manipulation of the argument phrase leads to sql injection. The patch is named...

CVE-2010-10003

The CVE-2010-10003 entry concerns gesellix titlelink for Joomla. The vulnerability affects the file plugin_content_title.php, where manipulation of the phrase argument leads to SQL injection. A patch is available (hash: b4604e523853965fa981a4e79aef4b554a535db0) and should be applied to fix the is...

CVE-2012-10003

CVE-2012-10003 concerns ahmyi RivetTracker. The vulnerability is a cross-site scripting flaw caused by manipulation of the argument $_SERVER['PHP_SELF']. The issue is described as potentially exploitable remotely and affects unknown processing; no specific affected versions are listed in the prov...

CVE-2012-10003 ahmyi RivetTracker cross site scripting

A vulnerability, which was classified as problematic, has been found in ahmyi RivetTracker. This issue affects some unknown processing. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be initiated remotely. The patch is named...