PT-2023-6859 · Opnsense · Opnsense

Name of the Vulnerable Software and Affected Versions: OPNsense versions prior to 23.7.5 Description: The issue is related to the lack of protection of the web page structure in the OPNsense operating system. This can be exploited by a remote attacker to conduct cross-site scripting attacks using...

SUSE CVE-2023-39357

Cacti is an open source operational monitoring and fault management framework. A defect in the sqlsave function was discovered. When the column type is numeric, the sqlsave function directly utilizes user input. Many files and functions calling the sqlsave function do not perform prior validation...

CVE-2023-39357

Cacti is an open source operational monitoring and fault management framework. A defect in the sqlsave function was discovered. When the column type is numeric, the sqlsave function directly utilizes user input. Many files and functions calling the sqlsave function do not perform prior validation...

CVE-2023-32578

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

CVE-2023-32578

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

CVE-2023-32578

CVE-2023-32578 is a Stored XSS against Twinpictures Column-Matic plugin

CVE-2023-32578 WordPress Column-Matic Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

CVE-2023-32578 WordPress Column-Matic Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

PT-2023-23885 · Twinpictures · Twinpictures Column-Matic Plugin

Name of the Vulnerable Software and Affected Versions: Twinpictures Column-Matic plugin versions 1.3.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects authenticated users with contributor or higher permissions. This vulnerability allow...

WordPress plugin column-matic cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-32578: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Twinpictures Column-Matic plugin = 1.3.3 versions...

WordPress Multi-column Tag Map Plugin <= 17.0.26 is vulnerable to Broken Access Control

Software Multi-column Tag Map Type Plugin Vulnerable versions = 17.0.26 Fixed in 17.0.27 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41651 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 543c5fba661a Credits Rio Darmawan Require...

CVE-2023-41539

phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter...

Business Directory Script SQL Injection Vulnerability

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A security vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from the vulnerability to SQL injection via the column parameter...

CVE-2023-41539: Improper Neutralization of Special Elements used in an SQL Command

phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

CVE-2023-40749

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...

Food Delivery Script SQL Injection Vulnerability

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...

PT-2023-27614

Name of the Vulnerable Software and Affected Versions PHPJabbers Food Delivery Script version 3.0 Description The issue is related to SQL Injection in the column parameter of "index.php". This allows for potential exploitation. No information is provided about the estimated number of potentially...