CVE-2024-44036

creationtimestamp| type| source ---|---|--- 2024-10-06 15:43:20+00:00| seen| https://t.me/cvedetector/7174...

WordPress Kodex Posts likes Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Kodex Posts likes Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44036 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a36dce24013f Credits SOPROBRO Required privilege...

CVE-2022-44036

creationtimestamp| type| source ---|---|--- 2023-01-04 00:17:53+00:00| seen| https://t.me/cibsecurity/55842...

CVE-2022-44036

In b2evolution 7.2.5, if configured with adminscanmanipulatesensitivefiles, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor's position is that this is "very obviously a feature not an issue and if you don't like that feature it is very obvious how to...

CVE-2022-44036

In b2evolution 7.2.5, if configured with adminscanmanipulatesensitivefiles, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor's position is that this is "very obviously a feature not an issue and if you don't like that feature it is very obvious how to...

CVE-2022-44036

CVE-2022-44036 affects b2evolution 7.2.5. When configured with the option "admins_can_manipulate_sensitive_files", admins can upload arbitrary files, which can lead to command execution. The vendor treats this as a feature, and disabling the feature is suggested as a mitigation. No explicit patch...

CVE-2021-44036

creationtimestamp| type| source ---|---|--- 2021-11-19 20:17:13+00:00| seen| https://t.me/cibsecurity/32722...

CVE-2021-44036

Team Password Manager aka TeamPasswordManager before 10.135.236 has a CSRF vulnerability during import...

CVE-2021-44036

CVE-2021-44036 affects Team Password Manager (TeamPasswordManager) before version 10.135.236, with a cross-site request forgery (CSRF) vulnerability during import. The issue is rooted in insufficient request validation across import functionality, enabling an attacker to induce unintended actions...

Orbit Downloader URL Unicode conversion buffer overflow

Added: 07/07/2008 CVE: CVE-2008-1602 BID: 28541 OSVDB: 44036 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability during Unicode conversion in the download failure notification message allows command execution when Orbit Downloade...