11958 matches found
TIBCO Security Advisory: July 18, 2023 - TIBCO EBX Add-ons -CVE-2023-26217
TIBCO EBX Add-ons SQL Injection Vulnerability Original release date: July 18, 2023 Last revised:--- CVE-2023-26217 Source: TIBCO SoftwareInc. Products Affected TIBCO EBX Add-ons versions 4.5.17 and below TIBCO EBX Add-ons versions 5.6.2 and below TIBCO EBX Add-ons version 6.1.0 The following...
WordPress Remove Add to Cart WooCommerce Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)
Software Remove Add to Cart WooCommerce Type Plugin Vulnerable versions = 1.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b3c05cadc1a1 Credits Rafie Muhammad...
WordPress Sticky add to cart for Woo Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Sticky add to cart for Woo Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 982520550df9 Credits Rafie Muhammad Patchsta...
WordPress Conditional Logic for Woo Product Add-ons Plugin < 1.2.1 is vulnerable to Cross Site Scripting (XSS)
Software Conditional Logic for Woo Product Add-ons Type Plugin Vulnerable versions 1.2.1 Fixed in 1.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 80418579c1aa Credits Rafie...
WordPress Remove Add to Cart Button for WooCommerce Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Remove Add to Cart Button for WooCommerce Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e8228bf4c98a Credits Rafie...
CVE-2023-3695
A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file add-product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2023-3695 Campcodes Beauty Salon Management System add-product.php sql injection
A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file add-product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2023-3695 Campcodes Beauty Salon Management System add-product.php sql injection
A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file add-product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
PT-2023-25750 · Unknown · Campcodes Beauty Salon Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the category argument in an unknown function of the file add-product.php. This can ...
CVE-2023-3660 Campcodes Retro Cellphone Online Store add_user_modal.php cross site scripting
A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/addusermodal.php. The manipulation of the argument un leads to cross site scripting. The attack may be launched remotely...
PT-2023-25627 · Unknown · Campcodes Retro Cellphone Online Store
Name of the Vulnerable Software and Affected Versions: Campcodes Retro Cellphone Online Store version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting some unknown functionality of the file /admin/add user modal.php. The manipulation of the un...
CVE-2023-37629
Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."...
Sql injection
Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc...
Exploit for Improper Authentication in Automattic Woocommerce_Payments
CVE-2023-28121 WooCommerce Payments - For installing requirem...
Online Piggery Management System 代码问题漏洞
Online Piggery Management System is an online pig management system by Lewa Personal Developer. Online Piggery Management System v1.0 has an arbitrary file upload vulnerability, the vulnerability stems from the lack of effective validation of add-pig.php for uploaded files, which can be exploited...
Directory traversal
An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...
CVE-2023-3599
A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function saveuser of the file adminclass.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched...
CVE-2023-36376
Cross-Site Scripting XSS vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section...
