74 matches found
CVE-2025-22290
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injection.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a throu...
CVE-2025-22290
CVE-2025-22290 affects WordPress plugin LTL Freight Quotes – FreightQuote Edition (≤ 2.3.11). Root cause: improper neutralization of special elements in SQL commands, enabling SQL Injection. Impact per available data: high confidentiality impact and overall critical severity (CVSS v3.1 9.3). Affe...
WordPress plugin LTL Freight Quotes – FreightQuote Edition SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin LTL Freigh...
PT-2025-4610 · Famethemes · Famethemes Onepress
Name of the Vulnerable Software and Affected Versions: FameThemes OnePress versions prior to 2.3.11 Description: The issue is related to a lack of authorization in FameThemes OnePress, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For...
WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Theme OnePress versions = 2.3.11...
CVE-2024-52427
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Server Side Include SSI Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through 2.3.11...
PT-2024-35267 · Unknown · Event Tickets With Ticket Scanner
Name of the Vulnerable Software and Affected Versions: Event Tickets with Ticket Scanner versions 2.3.11 and earlier Description: The issue affects Event Tickets with Ticket Scanner, allowing Server Side Include SSI Injection due to improper neutralization of special elements used in a template...
WordPress Plugin Responsive Gallery Grid 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
Elgg open redirect
Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...
Mageia: Security Advisory (MGASA-2016-0200)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-945Q-CH46-PCHG Deserialization of Untrusted Data in Spring AMQP
In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message...
Spring AMQP 代码问题漏洞
Spring AMQP is the application of core Spring concepts to the development of AMQP-based messaging solutions. A security vulnerability exists in Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, which stems from the Spring AMQP Message object in its toString method, which will create a new...
Dovecot 2.3.11 - 2.3.14 Path Traversal Vulnerability
Dovecot is prone to a path traversal vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Elgg Input Validation Error Vulnerability
Elgg is a set of open source social networking engine. The product blog, file sharing, groups and other features. An input validation error vulnerability exists in Elgg versions prior to 1.12.18 and 2.3.x prior to 2.3.11, which stems from a network system or product that does not properly validat...
Cross site request forgery (csrf)
UWA 2.3.11 allows index.php?g=admin&c=admin&a=addadmindo CSRF...
CVE-2018-20612
UWA 2.3.11 allows index.php?g=admin&c=admin&a=addadmindo CSRF...
CVE-2018-20612
UWA 2.3.11 contains a Cross-Site Request Forgery (CSRF) flaw in the admin creation flow. Specifically, the vulnerability is triggered via index.php?g=admin&c=admin&a=add_admin_do, allowing an attacker to induce unauthorized admin operations. The CVE entry for CVE-2018-20612 reflects affected soft...
CVE-2018-20612
UWA 2.3.11 allows index.php?g=admin&c=admin&a=addadmindo CSRF...
PivotX Remote Code Execution Vulnerability
PivotX is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. A security vulnerability exists in the lib.php file in PivotX version 2.3.11, which stems from the program failing to properly block the upload ...