64 matches found
ECHO-4808-FE1F-D864
Bulletin has no description...
CVE-2026-4808
creationtimestamp| type| source ---|---|--- 2026-04-08 09:15:53+00:00| seen| Telegram/2us3LfI3-3LhgNH-mQsCI8ayQxKx-qgKTK1cQJ8QYqIxeY 2026-05-07 19:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlbxgrrcyl2i...
CVE-2011-4808
SQL injection vulnerability in the HM Community comhmcommunity component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fndhome action to index.php...
CVE-2025-4808
creationtimestamp| type| source ---|---|--- 2025-05-16 20:35:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16758...
CVE-2025-4808
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical. This issue affects some unknown processing of the file /add-normal-ticket.php. The manipulation of the argument noadult/nochildren/aprice/cprice leads to sql injection. The attack may be...
CVE-2025-4808
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical. This issue affects some unknown processing of the file /add-normal-ticket.php. The manipulation of the argument noadult/nochildren/aprice/cprice leads to sql injection. The attack may be...
CVE-2025-4808 PHPGurukul Park Ticketing Management System add-normal-ticket.php sql injection
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical. This issue affects some unknown processing of the file /add-normal-ticket.php. The manipulation of the argument noadult/nochildren/aprice/cprice leads to sql injection. The attack may be...
CVE-2025-4808 PHPGurukul Park Ticketing Management System add-normal-ticket.php sql injection
A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical. This issue affects some unknown processing of the file /add-normal-ticket.php. The manipulation of the argument noadult/nochildren/aprice/cprice leads to sql injection. The attack may be...
CVE-2024-4808
A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file deletefaculty.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2024-4808
CVE-2024-4808 affects Kashipara College Management System 1.0, specifically the delete_faculty.php script. The vulnerability stems from an injectable id parameter in the deletion function, enabling SQL injection. Descriptions consistently state remote exploitation is possible and the vulnerabilit...
Malware in wlwz-2312-4808
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in wlwz-2312-4808 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d451ba6fb2427818257d07af719793cfb9572e67d6e4d4a61d8f07ab65b5c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-4808
The WP Post Popup WordPress plugin through 3.7.3 does not sanitise and escape some of its inputs, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-4808 WP Post Popup <= 3.7.3 - Admin+ Stored XSS
The WP Post Popup WordPress plugin through 3.7.3 does not sanitise and escape some of its inputs, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-4808
Affected software: WP Post Popup WordPress plugin
WordPress WP Post Popup Plugin <= 3.7.3 is vulnerable to Cross Site Scripting (XSS)
Software WP Post Popup Type Plugin Vulnerable versions = 3.7.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4808 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3ee14d9df6d2 Credits Abhijith A Required privileg...
Ubuntu 16.04 ESM / 18.04 ESM : Tinyproxy vulnerability (USN-4808-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4808-1 advisory. It was discovered that Tinyproxy created its pid file with insecure permissions. An attacker could use the vulnerability to cause arbitrary processes ...
CVE-2018-4808
Rejected reason: This candidate is unused by its CNA...
CVE-2022-4808 Improper Privilege Management in usememos/memos
Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4808
CVE-2022-4808 affects the GitHub repository usememos/memos, specifically versions prior to 0.9.1. The connected sources uniformly describe an Improper Privilege Management vulnerability that can allow an attacker to manipulate user roles, with some entries citing the potential to assign a HOST ro...