8723 matches found
PT-2022-27650 · WordPress · Advanced Booking Calendar
Name of the Vulnerable Software and Affected Versions: Advanced Booking Calendar plugin version 1.7.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...
PT-2022-27649 · WordPress · Advanced Booking Calendar
Name of the Vulnerable Software and Affected Versions: Advanced Booking Calendar plugin version 1.7.1 and earlier Description: The issue is related to an Unauth. SQL Injection SQLi vulnerability. This means that an unauthorized user can potentially inject malicious SQL code, which could lead to...
WordPress plugin Advanced Booking Calendar SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
WordPress plugin Advanced Booking Calendar 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2022-44962
webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the component /calendar/viewcalendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject field...
PT-2022-27361 · Webtareas · Webtareas
Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject field in the /calendar/viewcalendar.php component. This enables the execution of maliciou...
CVE-2022-44962
CVE-2022-44962 corresponds to a cross-site scripting (XSS) vulnerability in webtareas version 2.4p5, located in the /calendar/viewcalendar.php component. The issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Subject field, which could affect u...
webTareas 跨站脚本漏洞
webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which stems from a cross-site scripting XSS vulnerability found i...
Advanced Booking Calendar <= 1.7.1 - Unauthenticated SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...
CVE-2022-41968
Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for...
CVE-2022-41968 Nextcloud Server's calendar name length not validated before writing to database
Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for...
Nextcloud 资源管理错误漏洞
Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A resource management error vulnerability exists in Nextcloud Server versions prior to 23.0.10, and prior to 24.0.5, which stems from a calendar name lengt...
PT-2022-26191 · Nextcloud +1 · Nextcloud Server +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 23.0.10 Nextcloud Server versions prior to 24.0.5 Description: The issue arises from the lack of validation of calendar name lengths before they are written to a database. This allows an attacker to send...
WordPress Booking Calendar Plugin SQL Injection (CVE-2018-20556)
A command execution vulnerability exists in WordPress Plugin Booking Calendar . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Unspecified vulnerability in WordPress Appointment Booking Calendar plugin
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2022-43482
Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...
CVE-2022-43482
Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...
Authorization
Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...
CVE-2022-43482 WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability
Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...