CVE-2005-4716

Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to 1 cause a denial of service OpenTP1 system outage via invalid data to a port used by a system-server process, and 2 cause a denial of service process failure via invalid data to a port used by any of certain other...

CVE-2025-4716

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/credittransactionadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be launched...

CVE-2025-4716

The CVE-2025-4716 entry concerns Campcodes Sales and Inventory System v1.0. Affected component: the PHP file /pages/credit_transaction_add.php, where manipulating the prod_name parameter leads to an SQL injection. The vulnerability is exploitable remotely and exploitation has been publicly disclo...

CVE-2025-4716 Campcodes Sales and Inventory System credit_transaction_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/credittransactionadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be launched...

CVE-2025-4716 Campcodes Sales and Inventory System credit_transaction_add.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/credittransactionadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be launched...

CVE-2024-4716

creationtimestamp| type| source ---|---|--- 2025-02-19 22:21:30+00:00| seen| Telegram/nf0C1nz4sRxuEV75Jt8yUSMmQEC4FKfOFViBwKsf9PzlFXWf...

CVE-2024-4716

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /model/updateexam.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

CVE-2023-4716 Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mlagallery' shortcode in versions up to, and including, 3.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2023-4716

CVE-2023-4716 : The WordPress plugin Media Library Assistant is vulnerable to stored XSS via the mla_gallery shortcode in versions up to 3.10 due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level permissions can inject scripts that execute on p...

CVE-2018-4716

Rejected reason: This candidate is unused by its CNA...

Oracle Linux 7 : kubernetes (ELSA-2019-4716)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4716 advisory. - OLCNE-494 CVE-2019-11244 fix CVE-2019-11244: 'kubectl --http-cache=' Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2022-4716

creationtimestamp| type| source ---|---|--- 2023-01-23 18:31:11+00:00| seen| https://t.me/cibsecurity/56853...

CVE-2022-4716

The CVE-2022-4716 issue affects the WP Popups WordPress plugin prior to version 2.1.4.8. The root cause is that the plugin does not validate and escape certain shortcode attributes before outputting them, enabling Stored Cross-Site Scripting (Stored XSS) where low-privilege users (as low as Contr...

CVE-2022-4716 WP Popups < 2.1.4.8 - Contributor+ Stored XSS

The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege...

WordPress WP Popups Plugin < 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software WP Popups Type Plugin Vulnerable versions 2.1.4.8 Fixed in 2.1.4.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4716 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID ab1421d0287e Credits István Márton Required...

IBM Planning Analytics Remote Code Execution (CVE-2019-4716)

A remote code execution vulnerability exists in IBM Planning Analytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Ubuntu: Security Advisory (USN-4716-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4716-1 : docker.io - security update

Etienne Champetier discovered that Docker, a Linux container runtime, created network bridges which by default accept IPv6 router advertisements. This could allow an attacker with the CAPNETRAW capability in a container to spoof router advertisements, resulting in information disclosure or denial...

IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution Exploit (2)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule "IBM TM1 / Planning Analytics Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a vulnerability in...

IBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule "IBM TM1 / Planning Analytics Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a vulnerability in...