CVE-2024-31356

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8...

CVE-2024-31356

CVE-2024-31356: SQL injection in Solwin Infotech User Activity Log WordPress plugin (affected: 1.0 through 1.8; per initial description). CVSS 3.1 base score 7.6 (HIGH); attack vector NETWORK, privileges required HIGH, user interaction NONE, scope CHANGED. Impact: CONFIDENTIALITY HIGH, AVAILABILI...

CVE-2024-31356 WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8...

CVE-2024-31356 WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8...

PT-2024-24000 · Solwin Infotech · Solwin Infotech User Activity Log

Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Activity Log versions 1.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation b...

WordPress Plugin User Activity Log SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers, and the WordPress plugin is an...

CVE-2024-2018

The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry-roles parameter in all versions up to, and including, 4.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

WordPress Plugin WP Activity Log Premium 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-18630 · WordPress · Wp Activity Log Premium

Name of the Vulnerable Software and Affected Versions: WP Activity Log Premium plugin for WordPress versions up to, and including, 4.6.4 Description: The issue allows for SQL Injection via the entry-roles parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...

CVE-2023-52359

Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability...

WordPress User Activity Log plugin <= 1.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Muhammad Daffa Patchstack Alliance in WordPress Plugin User Activity Log versions = 1.9...

CVE-2023-52716

Vulnerability of starting activities in the background in the ActivityManagerService AMS module. Impact: Successful exploitation of this vulnerability will affect availability...

WordPress User Activity Log Plugin <= 1.9 is vulnerable to SQL Injection

Software User Activity Log Type Plugin Vulnerable versions = 1.9 Fixed in 2.0 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31356 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 35f222cae91f Credits Muhammad Daffa Required privilege Administrator...

PT-2024-14707 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue concerns a vulnerability in the ActivityManagerService AMS module related to starting activities in the background. Successful exploitation of this vulnerability will affect...

MAL-2024-1203 Malicious code in nespresso-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ecb1d1aad101d1cf5bdd8986e77fa20c75f039412cec1ebe03442f8fec9f939 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1198 Malicious code in locus-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae618c99394568c62b082d0c55c5da01da065e9ad01343f5737caf05685612b8 The OpenSSF Package Analysis project identified 'locus-website' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1197 Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

CVE-2024-3259

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

CVE-2024-3258

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/addactivity.php. The manipulation of the argument title/description/start/end leads to sql injection. It is possible to initiate...