229 matches found
CVE-2023-2188
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-2188
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-2188
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
Sql injection
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-2188
The CVE-2023-2188 entry concerns the WordPress Colibri Page Builder plugin. Affected software: Colibri Page Builder for WordPress, versions up to and including 1.0.227. Root cause: insufficient escaping of the post_id parameter and inadequate preparation of the existing SQL query, enabling SQL In...
CVE-2023-2188 Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-2188 Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘postid’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
WordPress Plugin Colibri Page Builder SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Colibri Page Build...
PT-2023-18350 · WordPress · Colibri Page Builder
Name of the Vulnerable Software and Affected Versions: Colibri Page Builder for WordPress versions up to, and including, 1.0.227 Description: The issue allows authenticated attackers with administrator-level privileges to perform SQL Injection via the post id parameter due to insufficient escapin...
WordPress Colibri Page Builder Plugin <= 1.0.227 is vulnerable to SQL Injection
Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.227 Fixed in 1.0.229 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2188 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID c1922d4070dd Credits Marco Wotschka Required privilege...
CVE-2022-44039
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...
Default credentials
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...
Franklin Fueling System Colibri 安全漏洞
Franklin Fueling System Colibri is a fuel system from Franklin Fueling System, Inc. in the United States. The system monitors fuel density and inventory levels. A security vulnerability exists in Franklin Fueling System Colibri version 1.9.22.8925, which originates from being affected by a file...
CVE-2022-44039
The CVE-2022-44039 entry concerns Franklin Fueling System FFS Colibri 1.9.22.8925, where a file system overwrite vulnerability exists due to insecure use of fopen with mode wb. This can enable an attacker to remotely overwrite critical files (e.g., system.conf, passwd), potentially leading to pri...
CVE-2022-44039
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...
Exploit for Path Traversal in Franklinfueling Colibri_Firmware
CVE-2021-46417 Franklin Fueling Systems Colibri Controller Mod...
A week in security (April 4 – 10)
Last week on Malwarebytes Labs: Why data protection and privacy are not the same, and why that matters: Lock and Code S03E09 YouTube channels of Taylor Swift, Justin Bieber, Harry Styles, and other musicians compromised Successful operations against Russian Sandworm and Strontium groups targeting...
Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 Local File Inclusion
Exploit Title: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion LFI Date: 7/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.franklinfueling.com/ Version: 1.8.19.8580 Tested on: Linux Firefox CVE : CVE-2021-46417 Proof of Concept...
Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion Vulnerability
Exploit Title: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion LFI Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.franklinfueling.com/ Version: 1.8.19.8580 Tested on: Linux Firefox CVE : CVE-2021-46417 Proof of Concept ============ HT...
Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)
Exploit Title: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion LFI Date: 7/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.franklinfueling.com/ Version: 1.8.19.8580 Tested on: Linux Firefox CVE : CVE-2021-46417 Proof of Concept...