CVE-2025-4307

PHPGurukul Art Gallery Management System 1.1 is affected by an SQL injection in /admin/add-art-medium.php via the artmed parameter. The vulnerability can be exploited remotely and exploits have been publicly disclosed. Public guidance suggests disabling access to /admin/add-art-medium.php and res...

CVE-2024-4307

SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints /accounts/activities.php?id=1, /accounts/view-deposit.php?id=1, /accounts/viewcards. php?id=1,...

CVE-2019-4307

creationtimestamp| type| source ---|---|--- 2024-01-29 12:41:34+00:00| seen| https://t.me/ctinow/175196...

Malicious code in wlwz-2312-4307 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5643ac7f0b1808cca6fd2648c0273656fe9995e33c2a3c6915625e48b1cdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-564 Malicious code in wlwz-2312-4307 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5643ac7f0b1808cca6fd2648c0273656fe9995e33c2a3c6915625e48b1cdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-4307

creationtimestamp| type| source ---|---|--- 2023-09-12 00:26:21+00:00| seen| https://t.me/cibsecurity/70238...

CVE-2023-4307 Lock User Account <= 1.0.3 - Arbitrary Account Lock/Unlock via CSRF

The Lock User Account WordPress plugin through 1.0.3 does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make logged in admins lock and unlock arbitrary users via a CSRF attack...

CVE-2023-4307

CVE-2023-4307 affects the WordPress plugin Lock User Account (versions

WordPress Lock User Account Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Lock User Account Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4307 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b3c98ff9b7d7 Credits Dmitrii Ignatyev...

CVE-2022-4307

creationtimestamp| type| source ---|---|--- 2023-01-23 18:25:00+00:00| seen| https://t.me/cibsecurity/56834 2025-04-02 15:33:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10099...

CVE-2022-4307

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin...

CVE-2022-4307 Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin...

CVE-2022-4307

CVE-2022-4307 affects the Pardakht Delkhah WordPress plugin prior to 2.9.3. The plugin fails to sanitise/escape several parameters, enabling unauthenticated attackers to craft requests containing XSS payloads that are triggered when a high-privilege user (e.g., admin) visits a plugin page. Report...

CVE-2022-4307 Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin...

CVE-2021-4307

creationtimestamp| type| source ---|---|--- 2023-01-07 22:26:17+00:00| seen| https://t.me/cibsecurity/56127...

@egeria/egeria (>=0.20.1, <=0.23.10), deepsalter (>=0.7.0, <=2.6.4) +6 more potentially affected by CVE-2021-4307 via baobab (>=2.0.0-dev10, <=2.5.2)

baobab NPM version =2.0.0-dev10, =0.20.1, =0.7.0, =0.0.1, =0.0.58, =0.20.0, =0.0.8, =0.1.2 Source cves: CVE-2021-4307 Source advisory: OSV:GHSA-WVR2-Q86M-6WHP...

CVE-2021-4307

CVE-2021-4307 affects the Baobab data tree (Yomguithereal Baobab) up to version 2.6.0. The issue is a prototype pollution vulnerability: an attacker can manipulate object prototype attributes via a vulnerable function (merger), enabling remote impact on object prototypes. Affected functionality i...

RHEL 7 : java-11-openjdk (RHSA-2020:4307)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4307 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

CVE-2020-4307

CVE-2020-4307 affects IBM Security Guardium 11.1. The IBM bulletin documents an Improper Access Control vulnerability allowing an attacker on the same network to gain access to the Solr dashboard and cause a denial of service. CVSS base score 6.5 (Medium) with high impact on availability. A remed...

Ubuntu 18.04 LTS : Apache HTTP Server update (USN-4307-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4307-1 advisory. As a security improvement, this update adds TLSv1.3 support to the Apache HTTP Server package in Ubuntu 18.04 LTS. TLSv1.3 is enabled by default, and in certain...