com.github.gfernandez598:springwebflow-optforrepl (=1.0), com.github.stephanarts:cas-server-integration-zeromq (>=0.0.1 <=0.0.8) +443 more potentially affected by CVE-2017-8039 via org.springframework.webflow:spring-webflow (>=2.0.6.RELEASE <=2.4.5.RELEASE)

org.springframework.webflow:spring-webflow MAVEN version =2.0.6.RELEASE, =0.0.1, =1.0, =1.0.0.RELEASE, =1.0, =1.0, =1.0.0-GA, =1.0.0-GA, =1.0.0-GA, =1.0.0-GA, =1.0.0-RC1 and more Source cves: CVE-2017-8039 Source advisory: OSV:GHSA-Q4V9-QJMW-J7VF...

CVE-2022-1567

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wpjsadmin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6...

jdom: XXE allows attackers to cause a DoS via a crafted HTTP request

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request...

CVE-2022-23882

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

Sql injection

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

CVE-2022-23882

CVE-2022-23882 affects TuziCMS 2.0.6. The vulnerability is a SQL injection in the file App\Manage\Controller\BannerController.class.php caused by insufficient validation of external SQL inputs, enabling an attacker to execute arbitrary SQL and potentially access sensitive data. Multiple vendor/ n...

CVE-2022-23882

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

WordPress Survey Maker 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Survey Maker plugin 2.0.6 and previous versions have a cross-site scripting vulnerability, which can be exploited by attacke...

CVE-2021-44348

SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php...

CVE-2021-44347

SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController.class.php...

TuziCMS SQL注入漏洞

TuziCMS Rabbit CMS is a PHP and MySQL-based enterprise content management system. 2.0.6 version of TuziCMS is vulnerable to SQL injection, which can be exploited by attackers via "AppManageControllerGuestbookController.class.php". Vulnerability attack...

PT-2021-23998 · Laravel · Laravel Ignition

Name of the Vulnerable Software and Affected Versions: Laravel Ignition component versions prior to 1.16.15 Laravel Ignition component versions 2.0.x prior to 2.0.6 Description: The issue concerns the "fix variable names" feature in the Ignition component for Laravel, which can lead to incorrect...

IBM Data Risk Manager Encryption Issue Vulnerability

IBM Data Risk Manager is a data risk manager from IBM Corporation of the United States. The product supports discovery, analysis and visualization of business risk data, etc. A security vulnerability exists in IBM Data Risk Manager iDNA 2.0.6, which could be exploited by an attacker to decrypt...

IBM Data Risk Manager User Credentials Plaintext Storage Vulnerability

IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A user credentials plaintext storage vulnerability exists in IBM Data Risk Manager version 2.0.6. An attacker could exploit the vulnerability to read plaintext credentials...

CVE-2021-38915

CVE-2021-38915 affects IBM Data Risk Manager 2.0.6, where user credentials are stored in plain text. The vulnerability is that authenticated users can read plaintext credentials due to insecure storage, as stated in multiple sources. There is no indication of remote code execution or exploit deta...

Wordpress MStore API 2.0.6 Plugin - Arbitrary File Upload Vulnerability

Exploit Title: Wordpress Plugin MStore API 2.0.6 - Arbitrary File Upload Google Dork: inurl:/wp-content/plugins/mstore-api/ Exploit Author: spacehen Vendor Homepage: https://wordpress.org/plugins/mstore-api/ Version: 2.0.6, possibly higher Tested on: Ubuntu 20.04.1 import os.path from os import...

WordPress WP Simple Booking Calendar plugin <= 2.0.6 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Martin Vierula Trustwave in WordPress WP Simple Booking Calendar plugin versions = 2.0.6. Solution Update the WordPress WP Simple Booking Calendar plugin to the latest available version at least 2.0.7...

WP Simple Booking Calendar <= 2.0.6 (before 07/12/2021) - Authenticated SQL Injection

The plugin did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue Note WPScanTeam: The issue was fixed without bumping the version, so there are two 2.0.6 versions out there, on...

uListing < 2.0.6 - Modify User Roles via CSRF

An Add/Edit User Roles via CSRF vulnerability was discovered in the plugin. Missing WPNonce security tokens https://codex.wordpress.org/WordPressNonces . PoC | CSRF | Add/Edit User Roles: POST /wp-admin/admin-ajax.php HTTP/2 Host: example.com Cookie: cookies User-Agent: Mozilla/5.0 Content-Type:...

PT-2021-20330 · Jdom +3 · Jdom +3

Name of the Vulnerable Software and Affected Versions: JDOM versions 2.0.6 and earlier Description: An XXE issue in SAXBuilder in JDOM allows attackers to cause a denial of service via a crafted HTTP request. Recommendations: For JDOM versions 2.0.6 and earlier, as a temporary workaround, conside...