9372 matches found
CVE-2022-28512
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...
Sql injection
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...
CVE-2022-28512
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...
CVE-2022-28512
CVE-2022-28512 affects Sourcecodester Fantastic Blog CMS 1.0. The vulnerability is a SQL injection in /fantasticblog/single.php via the id parameter (e.g., id=5), allowing an attacker to inject queries. Reported scores indicate high/critical impact (CVSS v2 base 7.5; v3.1 base 9.8) across confide...
CVE-2022-28512: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...
PT-2022-19060
Name of the Vulnerable Software and Affected Versions Sourcecodester Fantastic Blog CMS version 1.0 Description A SQL injection issue exists, allowing an attacker to inject queries in the "/fantasticblog/single.php" endpoint via the id parameter. Recommendations For Sourcecodester Fantastic Blog...
Fantastic Blog CMS SQL Injection Vulnerability
SourceCodester Fantastic Blog CMS is an application. Absolutely brilliant web content management system for blogs/posts. sourcecodester Fantastic Blog CMS version 1.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability to inject queries in /fantasticblog/single.php via the ...
Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update
The plugin does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a result, any authenticated user, such as subscriber could modify arbitrary blog options PoC POST /wp-admin/admin-ajax.php...
CVE-2022-0952
The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as...
CVE-2022-0952
The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as...
CVE-2022-0952
The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as...
Cross site request forgery (csrf)
The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as...
CVE-2022-0952: Cross-Site Request Forgery (CSRF)
The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as...
You Need to Update iOS, Android, and Chrome Right Now
Plus: Microsoft patched some 100 flaws, while Oracle issued more than 500 security fixes...
WordPress Hermit plugin跨站脚本漏洞
WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Hermit plugin cross-site scripting vulnerability, no details of the vulnerability are currently...
Threat Source newsletter (April 28, 2022) — The 2022 Cybersecurity Mock Draft
By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter that’s going to be a little different, but bear with me. In honor of the NFL Draft starting this evening — an event that Cisco is helping to secure — I thought it’d be appropriate to look at building a... This is only...
WordPress plugin myCred licensing issue vulnerability (CNVD-2022-76222)
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. security vulnerabilities in versions of the WordPress plugin myCred prior to 2.4.4 stem from the followin...
Elon Musk’s Twitter Buy Exposes a Privacy Minefield
The social network’s user data and more will soon be at the whims of the world’s richest man. Who’s worried?...
