12 matches found
CVE-2024-30243
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5...
CVE-2024-30243
CVE-2024-30243 is an SQL Injection affecting the WordPress Tooltips plugin prior to 9.4.5, caused by improper neutralization of SQL elements. The metric indicates a base CVSS v3.1 score of 8.5 (HIGH) with network attack vector, low attack complexity, and user interaction NONE. Affected software: ...
CVE-2024-30243 WordPress Tooltips plugin < 9.4.5 - Auth. SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5...
CVE-2024-30243 WordPress Tooltips plugin < 9.4.5 - Auth. SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5...
WordPress WordPress Tooltips Plugin < 9.4.5 is vulnerable to SQL Injection
Software WordPress Tooltips Type Plugin Vulnerable versions 9.4.5 Fixed in 9.4.5 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30243 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 3d42caaef59c Credits Yudistira Arya Required privilege Contributor...
CVE-2023-30243
creationtimestamp| type| source ---|---|--- 2023-05-05 18:25:12+00:00| seen| https://t.me/cibsecurity/63374...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is affected by a SQL Injection via TunnelId, enabling access to sensitive information. This CVE (CVE-2023-30243) has a CVSSv3.1 base score of 7.5 (HIGH), with network attack vector, no user interaction, and no privileges required. The vulner...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2022-30243
creationtimestamp| type| source ---|---|--- 2022-07-15 16:35:21+00:00| seen| https://t.me/cibsecurity/46303 2022-08-13 09:32:32+00:00| seen| https://t.me/itsecnews/1183...
CVE-2022-30243
The CVE-2022-30243 entry relates to Honeywell Alerton Visual Logic up to 2022-05-04, where unauthenticated remote writes allow crafted programming changes stored on the controller and executed without verification. This enables a malicious user to alter or stop the controller’s program, potential...
xen elevation of privilege vulnerability (CNVD-2017-30243)
Xen is an open source virtual machine monitor developed by the Xen Project. Xen suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to gain elevated privileges...
rghost.net XSS vulnerability
Vulnerable URL: http://rghost.net/?lang=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30243 Google Pagerank| 3 VIP website status:| Yes Check rghost.net SSL...