Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4...

CVE-2023-50843

CVE-2023-50843 pertains to Clockwork SMS Notfications for WordPress. The vulnerability is an SQL Injection due to improper input handling in the plugin, affecting versions from n/a up to 3.0.4. The exploitation would be via an authenticated context (Authenticated(Administrator+) as indicated in r...

WordPress Plugin Clockwork SMS Notfications SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Clockwork SMS Notfications...

CVE-2023-50843: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4...

PT-2023-31675

Name of the Vulnerable Software and Affected Versions Clockwork SMS Notfications versions 3.0.4 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

WordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection

Software Clockwork SMS Notfications Type Plugin Vulnerable versions = 3.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50843 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 56466c20b5e4 Credits Mika Required privilege Administrator...

Cross-site Request Forgery (CSRF)

Overview clockworkweb is a web interface for Clockwork Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the homecontroller.rb class. Remediation Upgrade clockworkweb to version 0.1.2 or higher. References - GitHub Commit - GitHub Issue...

GHSA-P4XX-W6FR-C4W9 Clockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.2

Clockwork Web before 0.1.2, when used with Rails before 5.2 is used, allows Cross-Site Request Forgery CSRF. A CSRF attack works by getting an authorized user to visit a malicious website and then performing requests on behalf of the user. In this instance, actions include enabling and disabling...

Clockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.2

Clockwork Web before 0.1.2, when used with Rails before 5.2 is used, allows Cross-Site Request Forgery CSRF. A CSRF attack works by getting an authorized user to visit a malicious website and then performing requests on behalf of the user. In this instance, actions include enabling and disabling...

CVE-2023-25015

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

Cross site request forgery (csrf)

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

CVE-2023-25015: Cross-Site Request Forgery (CSRF)

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

CVE-2023-25015

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

CVE-2023-25015

CVE-2023-25015 concerns Clockwork Web prior to 0.1.2 when used with Rails

PT-2023-19865

Name of the Vulnerable Software and Affected Versions Clockwork Web versions prior to 0.1.2 Rails versions prior to 5.2 Description The issue allows Cross-Site Request Forgery CSRF attacks, which work by getting an authorized user to visit a malicious website and then performing requests on behal...

CVE-2023-25015

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

CVE-2023-25015

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

CVE-2023-25015

Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF...

Clockwork Web Cross-Site Request Forgery Vulnerability

Clockwork Web is the web interface for Clockwork. A security vulnerability exists in Clockwork Web versions prior to 0.1.2, which stems from a cross-site request forgery when using Rails versions prior to 5.2...

CSRF Vulnerability with Rails < 5.2

Clockwork Web is vulnerable to cross-site request forgery CSRF with Rails 5.2. A CSRF attack works by getting an authorized user to visit a malicious website and then performing requests on behalf of the user. In this instance, actions include enabling and disabling jobs...