1392 matches found
SUSE CVE-2023-39357
Cacti is an open source operational monitoring and fault management framework. A defect in the sqlsave function was discovered. When the column type is numeric, the sqlsave function directly utilizes user input. Many files and functions calling the sqlsave function do not perform prior validation...
CVE-2023-39357
Cacti is an open source operational monitoring and fault management framework. A defect in the sqlsave function was discovered. When the column type is numeric, the sqlsave function directly utilizes user input. Many files and functions calling the sqlsave function do not perform prior validation...
CVE-2023-32578
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...
CVE-2023-32578
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...
CVE-2023-32578
CVE-2023-32578 is a Stored XSS against Twinpictures Column-Matic plugin
CVE-2023-32578 WordPress Column-Matic Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...
CVE-2023-32578 WordPress Column-Matic Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...
PT-2023-23885 · Twinpictures · Twinpictures Column-Matic Plugin
Name of the Vulnerable Software and Affected Versions: Twinpictures Column-Matic plugin versions 1.3.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with contributor or higher permissions. This vulnerability allow...
WordPress plugin column-matic cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress Multi-column Tag Map Plugin <= 17.0.26 is vulnerable to Broken Access Control
Software Multi-column Tag Map Type Plugin Vulnerable versions = 17.0.26 Fixed in 17.0.27 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41651 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 543c5fba661a Credits Rio Darmawan Require...
CVE-2023-41539
phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter...
Business Directory Script SQL注入漏洞
Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A security vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from the vulnerability to SQL injection via the column parameter...
CVE-2023-40749
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...
CVE-2023-40749
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...
Food Delivery Script SQL注入漏洞
Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...
Daylight Studio Fuel CMS SQL Injection Vulnerability
Daylight Studio Fuel CMS is a content management system based on CodeIgniter. A security vulnerability exists in Daylight Studio Fuel CMS version 1.4.9, which stems from an SQL injection vulnerability in the file Basemodulemodel.php that allows remote attackers to execute arbitrary code via the c...
CVE-2023-36310
There is a Cross Site Scripting XSS vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0...