CVE-2023-4547

SPA-Cart eCommerce CMS 1.9.0.3 is affected by a cross-site scripting vulnerability in the /search endpoint. The issue stems from unsanitized input in the parameters filter[brandid] and filter[price] , which can be exploited remotely to inject script. Mitigation: upgrade to a version newer than 1....

CVE-2022-4547

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:20+00:00| seen| https://t.me/cibsecurity/56547 2025-04-04 18:36:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10520...

CVE-2022-4547 Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi

The Conditional Payment Methods for WooCommerce WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin|users with a role as low as admin...

CVE-2022-4547

CVE-2022-4547 refers to a SQL injection in the Conditional Payment Methods for WooCommerce WordPress plugin up to version 1.0, caused by improper sanitisation/escaping of a parameter before SQL usage. The vulnerability enables exploitation by high-privilege users (e.g., admin) and is documented w...

Mageia: Security Advisory (MGASA-2013-0349)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-4547

creationtimestamp| type| source ---|---|--- 2021-01-27 20:37:33+00:00| seen| https://t.me/cibsecurity/22737...

CVE-2020-4547

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...

CVE-2020-4547

IBM Jazz Foundation products are affected by CVE-2020-4547, a remote, click-hijacking vulnerability where誘 users are tricked into visiting a malicious site, enabling an attacker to hijack the victim’s clicking actions and potentially launch further attacks. Affected stack spans IBM Jazz Team Serv...

CVE-2020-4547

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...

Oracle Linux 8 : libpcap (ELSA-2020-4547)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4547 advisory. 14:1.9.1-4 - Related: 1806422 - Building libpcap to side-tag for tcpdump 14:1.9.1-3 - Related: 1743650 - reverting rdma changes due to unresolved dependency loo...

Security Bulletin: IBM Security Directory Server vulnerable to multiple issues (CVE-2019-4563, CVE-2019-4547)

Summary Multiple security vulnerabilities have been fixed and delivered in IBM Security Directory Server. Vulnerability Details CVEID: CVE-2019-4563 DESCRIPTION: IBM Security Directory Server does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to ge...

CVE-2019-4547

CVE-2019-4547 affects IBM Security Directory Server 6.4.0. The vulnerability arises when the server generates an error message that reveals sensitive information about its environment, users, or data. The IBM bulletin identifies the affected product/version and provides a patch: 6.4.0.22-ISS-ISDS...

CVE-2017-4547

CVE-2017-4547 is rejected/not used and does not represent an active vulnerability.

CVE-2017-4547

...

CVE-2016-4547

CVE-2016-4547: The NVD/NIST entry describes a DoS vulnerability on Samsung devices running Android 4.4 (KitKat), 5.0/5.1 (Lollipop), or 6.0 (Marshmallow). The issue arises from a crafted system call to TvoutService_C, which can cause the system to crash. The referenced CVSS data indicates network...

CVE-2015-4547

CVE-2015-4547 affects RSA Web Threat Detection before 5.1 SP1. The vulnerability is that the AnnoDB password is stored in cleartext in a system configuration file, enabling remote authenticated users to read the file and obtain the password. Impact is information disclosure that could enable data...

CVE-2014-4547

The CVE-2014-4547 entry concerns the Rezgo Online Booking WordPress plugin. It describes multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php that allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter in plugi...

CVE-2014-4547

Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...

openSUSE Security Update : nginx-1.0 (openSUSE-SU-2013:1791-1)

The nginx webserver was fixed to avoid a restriction bypass when a space in not correctly escaped. CVE-2013-4547 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-913. The text...

openSUSE Security Update : nginx (openSUSE-SU-2013:1745-1)

The nginx webserver was fixed to avoid a restriction bypass when a space in not correctly escaped. CVE-2013-4547 On openSUSE 12.2, nginx was updated to version 1.4.4 stable - CVE-2013-4547 a character following an unescaped space in a request line was handled incorrectly bnc851295 - bugfix:...