224 matches found
VulnCheck KEV: CVE-2002-1131
Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...
CVE-2017-1000164
Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation...
CVE-2024-51644
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
CVE-2024-51644
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
CVE-2024-51644
CVE-2024-51644 — WordPress Addressbook plugin CSRF to Stored XSS Affects WordPress Addressbook plugin versions up to and including 1.1.3. The issue arises from a Cross-Site Request Forgery (CSRF) that enables Stored XSS in the Addressbook component. Public references in the connected docs (PT Sec...
CVE-2024-51644 WordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
CVE-2024-51644 WordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
WordPress plugin Addressbook 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
PT-2024-34788 · Unknown · Sam Wilson Addressbook
Name of the Vulnerable Software and Affected Versions: Sam Wilson Addressbook versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.1.3 and earlier, update to a version that fixes this issue,...
CVE-2024-51644: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
WordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Addressbook versions = 1.1.3...
WordPress Addressbook Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Addressbook Type Plugin Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51644 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 5403374942a8 Credits SOPROBRO Required privile...
RHEL 6 : evolution-data-server (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-...
RHEL 5 : evolution-data-server (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-...
CVE-2024-25510
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/addresspublicshow.aspx...
CVE-2024-25511
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/addresspublicnew.aspx...
CVE-2024-25510
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/addresspublicshow.aspx...
CVE-2024-25510: Improper Neutralization of Special Elements used in an SQL Command
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/addresspublicshow.aspx...
RuvarOA 安全漏洞
RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which originates from the id parameter of the /AddressBook/addresspublicshow.aspx file that lacks validation of externally entered SQL statements. An attacker can exploit this...