30 matches found
WordPress WP-Recall Plugin <= 16.26.5 is vulnerable to SQL Injection
Software WP-Recall Type Plugin Vulnerable versions = 16.26.5 Fixed in 16.26.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-32710 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID c2c2701e003d Credits LVT-tholv2k Required privilege Contributor Publishe...
CVE-2023-32710
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer of data from a search using the ‘copyresults’ command if they know the search ID SID of a search job that has recentl...
CVE-2023-32710
Summary: CVE-2023-32710 affects Splunk Enterprise versions prior to 9.0.5, 8.2.11, 8.1.14 and Splunk Cloud Platform prior to 9.0.2303.100. A low-privileged user can transfer data from a recently run search by using the copyresults command if they know the search ID (SID). Impact: Potential unauth...
CVE-2023-32710 Information Disclosure via the ‘copyresults’ SPL Command
In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer of data from a search using the ‘copyresults’ command if they know the search ID SID of a search job that has recentl...
CVE-2021-32710
CVE-2021-32710 affects Shopware (open source eCommerce platform) for versions below 6.3.5.2. The issue is described as potential session hijacking of store customers due to insecure session handling, with remediation guidance to update to version 6.3.5.2 (via Auto-Updater or download). For older ...
Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection
No description provided by source. $Id: ms09004spreplwritetovarbinsqli.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...
Microsoft SQL Server spreplwritetovarbin Buffer Overflow
Added: 04/29/2009 CVE: CVE-2008-5416 BID: 32710 OSVDB: 50917 Background Microsoft SQL Server is a database server package for Windows platforms. Problem A buffer overflow vulnerability in the spreplwritetovarbin stored procedure allows remote, authenticated attackers to execute arbitrary commands...
Microsoft SQL Server spreplwritetovarbin Buffer Overflow
Added: 04/29/2009 CVE: CVE-2008-5416 BID: 32710 OSVDB: 50917 Background Microsoft SQL Server is a database server package for Windows platforms. Problem A buffer overflow vulnerability in the spreplwritetovarbin stored procedure allows remote, authenticated attackers to execute arbitrary commands...