CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

CVE-2024-30928

DerbyNet v9.0 and below contains a SQL injection in the ajax/query.slide.next.inc endpoint via the unvalidated classids parameter. The issue allows remote attackers to execute arbitrary SQL commands, enabling viewing, adding, modifying, or deleting data in the back-end database. Documents consist...

CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

AWP Classifieds < 4.3.2 - Cross-Site Request Forgery

Description The AWP Classifieds plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.1. This is due to missing or incorrect nonce validation on the ajax function. This makes it possible for unauthenticated attackers to edit balances via a forged...

Pardot < 2.1.1 - Missing Authorization

Description The Pardot plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in versions up to, and including, 2.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to reset cache among othe...

Login With Ajax < 4.2 - Cross-Site Request Forgery to Notice Dismissal

Description The Login With Ajax plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.1. This is due to missing or incorrect nonce validation on the dismissadminnotice function. This makes it possible for unauthenticated attackers to dismiss notices...

CVE-2023-44396

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1...

CVE-2023-44396 iTop vulnerable to XSS in dashlet modifications ajax endpoints

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1...

CVE-2023-44396 iTop vulnerable to XSS in dashlet modifications ajax endpoints

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1...

CVE-2023-44396 iTop vulnerable to XSS in dashlet modifications ajax endpoints

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1...

CVE-2024-30546

Cross-Site Request Forgery CSRF vulnerability in Pixelite Login With Ajax.This issue affects Login With Ajax: from n/a through 4.1...

CVE-2024-30546 WordPress Login With Ajax plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Pixelite Login With Ajax.This issue affects Login With Ajax: from n/a through 4.1...

CVE-2024-30546 WordPress Login With Ajax plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Pixelite Login With Ajax.This issue affects Login With Ajax: from n/a through 4.1...

CVE-2024-30546

CVE-2024-30546 is described in the provided documents as a Cross-Site Request Forgery (CSRF) vulnerability in Pixelite Login With Ajax, affecting the Login With Ajax component up to version 4.1. The connected Red Hat entry repeats the CSRF description but does not provide additional technical det...

WordPress Element Pack Elementor Addons plugin <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search vulnerability

Sensitive Information Exposure via elementpackajaxsearch vulnerability discovered by Krzysztof Zając in WordPress Plugin Element Pack Elementor Addons versions = 5.5.6...

PT-2024-23476 · Pixelite · Login With Ajax

Name of the Vulnerable Software and Affected Versions: Login With Ajax versions n/a through 4.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Pixelite Login With Ajax. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

CVE-2024-3719

A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

Ivory Search – WordPress Search Plugin < 5.5.6 - Subscriber+ Index Creation

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcreateindex function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to trigger index...

CVE-2024-0881

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to rea...