11 matches found
CVE-2025-11353
A vulnerability was detected in code-projects Online Hotel Reservation System 1.0. This impacts an unknown function of the file /admin/addgalleryexec.php. Performing manipulation of the argument image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit i...
CVE-2024-11353
The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletemessage function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and...
CVE-2024-11353
creationtimestamp| type| source ---|---|--- 2024-12-07 01:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113609066930276320 2024-12-07 04:10:54+00:00| seen| https://t.me/cvedetector/12312...
CVE-2024-11353 SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletemessage function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and...
CVE-2024-11353 SMS for Lead Capture Forms <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletemessage function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and...
CVE-2020-11353
CVE-2020-11353 is rejected/not used; the entry does not represent an active vulnerability.
CVE-2019-11353
The CVE-2019-11353 issue affects the EnGenius EWS660AP router (firmware 2.0.284). An attacker can execute arbitrary commands by crafting payloads and injecting multiple parameters into the built‑in ping and traceroute utilities. The vulnerability’s root cause is the way input is handled for these...
UBUNTU-CVE-2017-11353
yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...
CVE-2017-11353
CVE-2017-11353 affects yadm (yet another dotfile manager) version 1.10.0. The issue is a race condition related to how git commands set permissions for new files and directories, which potentially allows access to SSH and PGP keys. The connected documents provide this description but do not inclu...
Fedora Update for rubygem-actionpack FEDORA-2012-11353
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...